UK GDPR

UK GDPR and Data Protection Act 2018

In force privacy consumer rights transfers

WhenIn effect since 1 January 2021

Who enforces itInformation Commissioner's Office

Who it applies toOrganizations established in the UK, and those outside it offering goods or services to or monitoring people in the UK.

Tell the regulatorNotify the ICO without undue delay and, where feasible, within 72 hours of becoming aware, unl… DPO requiredDPO required for public authorities, large-scale systematic monitoring, or large-scale special… RegistrationMost controllers must pay an annual data protection fee to the ICO unless exempt Transfers abroadTransfers need UK adequacy regulations under a 'not materially lower' data protection test, or… Request deadlineRespond within one month, extendable by two months Maximum fineUp to GBP 17.5 million or 4% of worldwide annual turnover, whichever is higher

If you already comply with

95%

of United Kingdom's 21 requirements are already met by European Union (GDPR). Here is what UK GDPR adds, biggest gaps first.

RegistrationGovernanceBig gap

GDPR0 No general registration; controllers communicate DPO contact details to the supervisory authority.

UK GDPR adds2 Most controllers must pay an annual data protection fee to the ICO unless exempt. Data Protection (Charges and Information) Regulations 2018 (SI 2018/480) reg. 2 · source ↗

Already covered by GDPR: Reach abroad, Lawful basis, Consent, Sensitive data, Children, Rights, Request deadline, Marketing, DPO required, DPO qualifications, DPIA, Records, Retention, Tell the regulator, Tell people, Transfers abroad, Localization, Maximum fine, Criminal liability, Private action.

A gap means UK GDPR is more demanding than GDPR on that requirement, on our 0 to 3 scale (how we score). Read the cited section before acting. Not legal advice.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the map Follow Regulatory Watch

In force
Coming into force
Sector laws

AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL