تُرجمت هذه الصفحة وتم التحقق منها آليًا. النسخة الإنجليزية هي المرجع. بعض الأجزاء لا تزال بالإنجليزية ريثما يتم التحقق من ترجمتها. عرض بالإنجليزية · الإبلاغ عن خطأ في الترجمة
UK GDPR
UK GDPR وData Protection Act 2018
نسخة المملكة المتحدة من GDPR بعد خروجها من الاتحاد الأوروبي، والتي باتت تختلف عنه في بعض المواضع بموجب Data (Use and Access) Act 2025.
The law in brief
The UK GDPR is the United Kingdom's version of the GDPR, kept in UK law after Brexit and read together with the Data Protection Act 2018. Its principles, legal bases and rights closely follow the EU text, so a GDPR program is a strong starting point, but UK-specific rules on transfers, the regulator and recent reforms now differ.
It is enforced by the Information Commissioner's Office (ICO).
على من يسري
- Organizations established in the UK, for processing in the context of that establishment.
- Organizations outside the UK that offer goods or services to people in the UK or monitor their behavior there; they may need a UK representative.
- It covers personal data about identified or identifiable living people; purely personal or household activity is outside it.
- Most organizations that process personal data must also pay a data protection fee to the ICO.
What it requires
A lawful basis for every use
Each purpose needs a lawful basis, as under the EU GDPR; the Data (Use and Access) Act adds recognized legitimate interests that need no balancing test.
Report breaches to the ICO within 72 hours
Report a personal data breach to the ICO without undue delay and, where feasible, within 72 hours of becoming aware of it, unless it is unlikely to result in a risk to people.
Transfers out of the UK
Send personal data outside the UK only under UK adequacy regulations, appropriate safeguards such as the International Data Transfer Agreement, or a listed exception.
Records, security and impact assessments
Keep records of processing, secure personal data appropriately, and carry out a data protection impact assessment before high-risk processing.
حقوق الأفراد
People have the same core rights as under the EU GDPR: to be informed, to access their data, to rectification and erasure, to restrict processing, to data portability, to object, and protections around automated decision-making. Requests are generally answered within one month.
Enforcement and penalties
فئتان من الغرامات: ما يصل إلى £17.5 مليون أو 4% من حجم الأعمال السنوي العالمي، أيهما أعلى، عن أخطر المخالفات، وما يصل إلى £8.7 مليون أو 2% عن غيرها. ويصدر ICO أيضًا توبيخات وإشعارات إنفاذ وإشعارات تقييم.
What's changing
Reform under way. The Data (Use and Access) Act 2025 amends the UK GDPR and the Data Protection Act 2018, including recognized legitimate interests, more flexibility for automated decision-making with safeguards, new cookie exemptions, and a duty to handle complaints. Its provisions are coming into force in stages; check which apply now. Regulatory Watch reports each stage.
What to do first
- Start from your GDPR program, and note where UK rules differ.
- Pay the ICO data protection fee if you have not.
- Review transfers out of the UK and use the UK's own mechanisms, such as the International Data Transfer Agreement or the UK Addendum.
- Track the Data (Use and Access) Act changes as they come into force, and update notices, cookies and complaints handling.
- Keep 72-hour breach reporting to the ICO ready.
Checked against the official text on 28 September 2026. Quotations are the operative words of the law, linked to the article they come from; the official text is the authority. This brief is written by the Association for practitioners and is not legal advice.
المستجدات الأخيرة
لم يُبلَّغ عن شيء بعد. تعرض Regulatory Watch القواعد الجديدة وإجراءات الإنفاذ وأحكام المحاكم فور صدورها.
المصادر
- UK GDPR (بصيغتها المستبقاة والمعدلة) legislation.gov.uk · نص رسمي أو جهة تنظيمية
مكتبة التشريعات
جميع قوانين الخصوصية في الولايات الأمريكية على خريطة واحدة
لدى 24 ولاية قانون شامل للخصوصية في المكتبة، إلى جانب قوانين الاتحاد الأوروبي والمملكة المتحدة والقوانين الاتحادية الأمريكية والقوانين العالمية: 102 قانونًا إجمالًا، كل منها مشروح بلغة واضحة مع مصادره. اختر ولاية لمعرفة ما يسري فيها.
- ساري
- يدخل حيز التنفيذ
- القوانين القطاعية