INDEPENDENT UK DATA PROTECTION GUIDANCESource review: 1 November 2026 Our editorial standards ↗
GDPR.me.ukDisclaimer

A practical resource for UK organisations

Understand UK GDPR.
Take the next step.

Make sense of UK data protection. Find the right guidance, review your evidence and build a plan you can put to work.

Start your compliance review Find the right resource
Official sources linkedAssessment answers stay with you
A clear method. Visible limits.
GTHE DATA PROTECTION DESK01—10

YOUR NEXT MOVE

From scattered evidence to a clear plan.

Work through ten connected areas. Record what you can evidence, identify the gaps and decide who does what next.

  1. 01Set your scope
  2. 02Review the evidence
  3. 03Assign the next actions
Start the gap assessment
Your outputRAG findings · Owned actions · Board summary
10connected review areas
50evidence-led checks
11workbook sheets
4practical sector routes

START WITH THE WORK

What is on your desk?

Choose the job you need to get done.
Follow it through to a useful record.

50-question assessment

Find the gaps

A structured review of governance, people, systems and suppliers.

Project playbook

Plan a new system

Work through risk screening, suppliers and launch decisions.

Rights-request playbook

Respond to a request

Organise recognition, searches, redaction and the response.

Incident playbook

Manage a suspected breach

Contain the incident, assess the risk and record the decisions.

THE CONNECTED FRAMEWORK

Ten areas.
A complete
working view.

Follow the obligation through to the evidence, the decision and the record. Each guide connects to its own assessment area and working document.

Explore the guidance
UK GDPR · DPA 2018 · PECR
Read the primary sources ↗
01

Compliance gap audit

Governance, evidence and a prioritised plan

02

Data protection impact assessments

High-risk processing, mitigations and approval

03

Records of processing

A working record of what happens to data

04

Lawful basis & privacy notices

Purpose-by-purpose decisions and clear notices

05

Retention & deletion

Justified periods, deletion and legal holds

06

International transfers

Overseas access, safeguards and transfer risk

07

Breach response

Recognition, escalation and notification decisions

08

Subject access requests

Searches, deadlines, redaction and exemptions

09

DPO & ICO fee

Roles, independence and registration checks

10

Cookies & direct marketing

Tags, consent, exceptions and marketing lists

THE WORKING REGISTERXLSX
A record you can
keep working with.
ROPARetentionActions+8 sheets
PROCESSING ACTIVITYOWNERREVIEW
Define the activity
Link the evidence
Record the decision
11 sheets. Your organisation’s evidence.
Illustrative structure · Downloads start blank

FROM GUIDANCE TO EVIDENCE

Make the work
easy to pick up again.

Use the spreadsheet registers for ongoing records. Use the guided documents for a decision, review or response. Save a working copy and return when you have the next piece of evidence.

  • Ten templates with individually labelled fields
  • Save, reopen and print your working records
  • Source links and completion prompts throughout
Open the working toolkit Download the workbook

THE CONTEXT MATTERS

Start with your sector.

All sector routes ↗

Clinics & healthcare

Patient information, clinical systems and sensitive data.

Your evidence starter pack

Legal & notarial practices

Client confidentiality, case files and professional duties.

Your evidence starter pack

Employers & HR teams

Recruitment, employee records and monitoring.

Your evidence starter pack

SMEs & service businesses

Proportionate controls for everyday processing.

Your evidence starter pack

NEWS & IMPLEMENTATION

The latest in data protection.

Read all news ↗

A BETTER NEXT STEP

Know what needs attention.
Give it an owner.

Start with one area or work through the full review. Your report makes the evidence, uncertainties and priorities visible.

Begin your review Understand the assessment method ↗