UK GDPR guidance and resources

<!doctype html>    <html lang="en"> <head prefix="og: http://ogp.me/ns#"> <meta charset="UTF-8"/> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="initial-scale=1.0, width=device-width"> <title>UK GDPR guidance and resources | ICO</title> <meta name="DC.Subject" content="UK GDPR guidance and resources" /> <meta name="DC.Date" content="Friday, November 08, 2024" /> <meta name="DC.Creator" content="" /> <meta name="DC.Publisher" content="ICO" /> <meta name="DC.Title" content="UK GDPR guidance and resources" /> <meta name="DC.PageID" content="3604" /> <meta property="og:title" content="UK GDPR guidance and resources" /> <meta property="og:type" content="website" /> <meta property="og:url" content="https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/" /> <meta property="og:description" content="" /> <meta property="og:image" content="" /> <meta name="twitter:title" content="UK GDPR guidance and resources" /> <meta name="twitter:description" content="" /> <meta name="robots" content="index" /> <link rel="shortcut icon" type="image/x-icon" href="/media2/lhphq55z/favicon.ico" /> <link rel="stylesheet" type="text/css" href="/css/site.css?v=2vrG7eADocFkX9vchR9h5gTORmu6STTHxmyTWJsW9nw" /> </head> <body id="top" class="bg-white min-h-screen "> <a class="flex items-center justify-center px-3 py-2 bg-secondary text-white text-xl sr-only focus:relative focus:w-full focus:h-fit" href="#main-content"> <span class="font-serif text-serif-base pr-2">Skip to main content</span> <span class="icon icon-arrow-down"></span> </a> <header class="w-full fixed md:static z-10 md:z-auto print:hidden"> <div class="bg-primary"> <div class="lg:container px-4 py-3.5 md:flex"> <div class="md:pr-8"> <a href="/"> <div class="bg-left bg-contain bg-no-repeat h-8 w-20 inline-block md:hidden" style="background-image: url('/media2/qkcg1rdf/logo-small.svg?width=80&height=32&v=1db03b868bf60c0');"></div> <div class="bg-left bg-contain bg-no-repeat h-24 w-40 hidden md:inline-block" style="background-image: url('/media2/myukqaa2/ico-header-logo.svg?width=160&height=96&v=1db03b866f17e90');"></div> <span class="sr-only">Hafan</span> </a> </div> <div class="grow items-stretch hidden md:flex"> <div class="font-serif text-center md:text-left text-white text-serif-base md:flex items-end md:pl-8 border-secondary border-dotted md:border-l-2"> <span>The ICO exists to empower you through information.</span> </div> </div> <div class="flex flex-col items-end md:pl-8"> <script type="application/json" id="language-settings"> {"cookieDomain":"ico.org.uk","options":[{"text":"English","href":"https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/","icon":"icon-lang-en","value":"English"},{"text":"Cymraeg","href":"https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/","icon":"icon-lang-cy","value":"Welsh"}]} </script> <div id="language-toggle"></div> <div class="grow flex items-end"> <button type="button" id="search-toggle" class="absolute rounded p-2 top-3 right-12 md:hidden hover:bg-secondary" aria-controls="search"> <span id="search-icon" class="block icon icon-search text-white text-xl"></span> <span class="sr-only">Search</span> </button> <div id="search" class="motion-safe:transition-all motion-safe:duration-200 hidden md:block w-full sm:w-fit max-h-0 md:max-h-fit overflow-hidden md:overflow-auto"> <form action="https://icosearch.ico.org.uk/s/search.html" method="GET" id="search-form" class="pt-3.5 md:pt-0"> <input type="hidden" name="collection" value="ico-meta" /> <input type="hidden" name="profile" value="_default" /> <div class="flex"> <label for="search-query" class="sr-only">Search</label> <input type="search" name="query" id="search-query" class="grow min-w-0 px-2 py-1 border-t border-b border-l border-r-0 border-white/50 focus:border-white focus:ring-0 rounded-l bg-secondary motion-safe:transition-colors hocus:bg-white text-white hocus:text-black sm:w-60 md:w-48" /> <button type="submit" class="text-transparent bg-secondary rounded-r p-2 border-t border-b border-r border-white/50"> <span class="block text-white text-xl icon icon-search"></span> <span class="sr-only">Search</span> </button> </div> </form> </div> </div> </div> </div> </div> <div class="bg-secondary"> <div class="lg:container md:px-4"> <button type="button" id="navbar-toggle" class="absolute rounded p-2 top-3 right-3 md:hidden hover:bg-secondary" aria-controls="navbar"> <span class="block icon icon-menu text-white text-xl"></span> <span class="sr-only">Menu</span> </button> <nav id="navbar" class="bg-secondary motion-safe:transition-all motion-safe:duration-200 hidden md:block max-h-0 md:max-h-fit overflow-hidden md:overflow-auto"> <ul class="border-primary border-dotted border-t-2 md:border-t-0 md:flex md:flex-wrap"> <li class="md:flex"> <a href="/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-grey md:hover:border-t-theme-grey"> <span>Hafan</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> <li class="md:flex"> <a href="/for-the-public/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-green md:hover:border-t-theme-green"> <span>For the public</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> <li class="md:flex"> <a href="/for-organisations/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-yellow md:hover:border-t-theme-yellow bg-primary md:border-t-theme-yellow"> <span>I sefydliadau</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> <li class="md:flex"> <a href="/make-a-complaint/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-orange md:hover:border-t-theme-orange"> <span>Gwneud cwyn</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> <li class="md:flex"> <a href="/action-weve-taken/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-red md:hover:border-t-theme-red"> <span>Action we've taken</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> <li class="md:flex"> <a href="/about-the-ico/" class="relative flex justify-between items-center text-white text-serif-lg md:text-base whitespace-nowrap md:whitespace-normal pl-9 md:pl-3 pr-4 md:pr-3 py-2 md:py-1 font-serif md:font-sans before:absolute before:w-2.5 before:top-2 before:bottom-2 before:left-4 md:before:hidden md:border-y-5 md:border-transparent before:bg-theme-blue md:hover:border-t-theme-blue"> <span>Am yr ICO</span> <span class="icon icon-arrow-right text-xl md:hidden"></span> </a> </li> </ul> </nav> </div> </div> </header> <main id="main-content" class="pt-20 md:pt-0 md:mt-7 mb-3 md:mb-4"> <div class="lg:container px-4 mb-4 print:hidden"> <nav aria-label="breadcrumb"> <ul class="-mx-1 flex flex-wrap text-sm"> <li class="mx-1"> <span class="after:content-['/'] after:ml-1"> <a href="/for-organisations/" class="text-link hover:underline">I sefydliadau</a> </span> </li> <li class="mx-1"> <span>UK GDPR guidance and resources</span> </li> </ul> </nav> </div> <div class="lg:container px-4"> <div class="border-dotted border-b-2 border-neutral-200 pb-2 sm:pb-3.5 md:pb-6 mb-2 sm:mb-3.5 md:mb-5"> <div class="md:flex md:items-center"> <h1 class="py-0.5 font-serif leading-none sm:border-l-10 sm:pl-3 text-serif-2xl sm:text-serif-3xl border-theme-yellow">UK GDPR guidance and resources</h1> <div class="md:pl-2 md:ml-auto mt-2 md:mt-2 print:hidden"> </div> </div> </div> <div class="umb-block-grid" data-grid-columns="12;" style="--umb-block-grid--grid-columns: 12;"> <div class="umb-block-grid__layout-container"> <div class="umb-block-grid__layout-item" data-content-element-type-alias="rightAsideLayout" data-content-element-type-key="7ca5bc32-4d2c-4fe0-90a2-b8a3541e892f" data-element-udi="umb://element/830310dda81c4cae83da0d994f272ea4" data-col-span="12" data-row-span="1" style=" --umb-block-grid--item-column-span: 12; --umb-block-grid--item-row-span: 1; "> <div class="umb-block-grid__area-container" style="--umb-block-grid--area-grid-columns: 12;"> <div class="umb-block-grid__area" data-area-col-span="9" data-area-row-span="1" data-area-alias="left" style="--umb-block-grid--grid-columns: 9;--umb-block-grid--area-column-span: 9; --umb-block-grid--area-row-span: 1;"> <div class="umb-block-grid__layout-container"> <div class="umb-block-grid__layout-item" data-content-element-type-alias="twoColumnLayout" data-content-element-type-key="2522fd53-e375-454c-a66d-94c0fee9b3c6" data-element-udi="umb://element/803d41924a0f4f89b107830091b2ddd5" data-col-span="9" data-row-span="1" style=" --umb-block-grid--item-column-span: 9; --umb-block-grid--item-row-span: 1; "> <div class="umb-block-grid__area-container" style="--umb-block-grid--area-grid-columns: 12;"> <div class="umb-block-grid__area" data-area-col-span="6" data-area-row-span="1" data-area-alias="left" style="--umb-block-grid--grid-columns: 6;--umb-block-grid--area-column-span: 6; --umb-block-grid--area-row-span: 1;"> <div class="umb-block-grid__layout-container"> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/12f36cede651469dbe641ad0c7eb7c8c" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/subject-access-requests/" x-title="Subject access requests (SARs)" x-description="What is a subject access request (SAR), how to recognise them and when and how to respond to them." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/c0c3d90e6b5443f1b33dd610f0cdfe6e" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/" x-title="Individual rights" x-description="Writing a privacy notice, responding to a subject access request, and when to delete, change, move or stop processing people's information." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/60b2db063c8840bd81390d40a7a8f85c" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/" x-title="Lawful basis, special category data and criminal offence data" x-description="Consent, contracts, legitimate interests, vital interests, public task, legal obligation, special category data, criminal offence data and biometrics." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/e516280b18dd4c858bea6a5f1c6b1c2e" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/controllers-and-processors/" x-title="Controllers and processors" x-description="Definitions of 'controllers' and 'processors', how to determine them and their responsibilities." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/6b8fe55583f048e88b48da2886121c0b" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/" x-title="International transfers" x-description="International data transfers, transfer agreements, transfer risk assessments and binding corporate rules." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/0ce1028e1f2a400fb9b1f469d17d2e49" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/security/" x-title="Security (data protection and cyber)" x-description="The security principles, personal data breaches, and guidance on encryption, ransomware and passwords." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/72d076e32c574caaae9a8e617ffbbeb9" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/employment/" x-title="Employment information" x-description="Advice for employers and organisations involved in employment issues on how to use and look after your workers’ personal information, and guidance about working from home." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/d37e1be9d0194ea8835b2eefe757f4a0" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/" x-title="Artificial intelligence" x-description="Artificial intelligence and data protection, AI risk assessment, explaining decisions made with AI and data analytics." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/eac5fa13a0e44206824dfd4e5e8d06d8" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/the-research-provisions/" x-title="Research provisions" x-description="Research provisions in the UK GDPR and the DPA 2018, the principles and grounds for processing, research exemptions and safeguards." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/45e07f105cd347d4b0d9e6a497809f96" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/online-safety-and-data-protection/" x-title="Online safety and data protection" x-description="Resources for organisations that use online safety technologies and processes." x-theme="yellow"></icon-navigation> </div> </div> </div> <div class="umb-block-grid__area" data-area-col-span="6" data-area-row-span="1" data-area-alias="right" style="--umb-block-grid--grid-columns: 6;--umb-block-grid--area-column-span: 6; --umb-block-grid--area-row-span: 1;"> <div class="umb-block-grid__layout-container"> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/dd9605313c7943efadf0c35f435a64d6" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/personal-information-what-is-it/" x-title="Personal information - what is it?" x-description="Key definitions, what is considered personal information and what "identifiable" means." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/f2429b0115f24aa6acbeab59679e711a" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/" x-title="Principles" x-description="Fairness, transparency, purpose limitation, minimisation, accuracy, accountability, storage and security. " x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/123064a8af1b47d0b69dbf3305f1a194" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/cctv-and-video-surveillance/" x-title="CCTV and video surveillance" x-description="CCTV, video surveillance, body worn cameras and drones." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/64f3e1a3da4f4047a6c46f3abcea19bc" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/" x-title="Accountability and governance" x-description="DPIAs, accountability principle, internal governance, contracts, documentation, and data protection officers." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/ad339486d7834874a92f3dc8bec1f440" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/exemptions/" x-title="Exemptions" x-description="When and how you can apply exemptions to the UK GDPR requirements." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/2ce615070ec44c4bb997690d502b75de" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/data-sharing/" x-title="Data sharing" x-description="The data sharing code, case studies and examples, checklist, the sharing of personal information with and by law enforcement authorities, sharing information to prevent harm and for child safeguarding purposes." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/dec81886bf2749f294a06d152a972907" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/childrens-information/" x-title="Children's information" x-description="How to protect children's information, the Age Appropriate Design Code and resources for online service providers." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/cc5ed468541144c6adf86d0e3b4691be" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/designing-products-that-protect-privacy/" x-title="Designing products that protect privacy" x-description="Privacy in the product lifecycle and designing online services for children." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/158c8be944bd417da19c70c0cb4e1802" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/data-protection-and-journalism-code-of-practice/" x-title="Data protection and journalism code of practice" x-description="The data protection and journalism code, reference notes, consultation responses and impact assessment." x-theme="yellow"></icon-navigation> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="iconNavigationBlock" data-content-element-type-key="bf55f9c2-2149-49f9-ba80-e5ad4d4f8855" data-element-udi="umb://element/2984d16555be4f4781cf455eb9c45535" data-col-span="6" data-row-span="1" style=" --umb-block-grid--item-column-span: 6; --umb-block-grid--item-row-span: 1; "> <icon-navigation x-href="/for-organisations/uk-gdpr-guidance-and-resources/training-videos/" x-title="Training videos" x-description="View the information governance and legislation training modules we provide to ICO staff as part of their internal training." x-theme="yellow"></icon-navigation> </div> </div> </div> </div> </div> </div> </div> <div class="umb-block-grid__area" data-area-col-span="3" data-area-row-span="1" data-area-alias="right" style="--umb-block-grid--grid-columns: 3;--umb-block-grid--area-column-span: 3; --umb-block-grid--area-row-span: 1;"> <div class="umb-block-grid__layout-container"> <div class="umb-block-grid__layout-item" data-content-element-type-alias="actionLinkBlock" data-content-element-type-key="3cbb3d60-8c37-4306-8aa9-266982d84f91" data-element-udi="umb://element/7edf834c6b9b4e719d640fb34b3545f9" data-col-span="3" data-row-span="1" style=" --umb-block-grid--item-column-span: 3; --umb-block-grid--item-row-span: 1; "> <action-link x-href="/for-organisations/data-protection-fee/" x-text="Pay fee, renew fee or register a DPO" x-theme="yellow"></action-link> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="actionLinkBlock" data-content-element-type-key="3cbb3d60-8c37-4306-8aa9-266982d84f91" data-element-udi="umb://element/422d1dd745414de9a3440cb546cb431a" data-col-span="3" data-row-span="1" style=" --umb-block-grid--item-column-span: 3; --umb-block-grid--item-row-span: 1; "> <action-link x-href="/for-organisations/report-a-breach/" x-text="Report a breach" x-theme="yellow"></action-link> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="actionLinkBlock" data-content-element-type-key="3cbb3d60-8c37-4306-8aa9-266982d84f91" data-element-udi="umb://element/6c649a15ce1e415ab7c23a3e65833997" data-col-span="3" data-row-span="1" style=" --umb-block-grid--item-column-span: 3; --umb-block-grid--item-row-span: 1; "> <action-link x-href="/for-organisations/advice-and-services/" x-text="Advice and services" x-theme="yellow"></action-link> </div> <div class="umb-block-grid__layout-item" data-content-element-type-alias="actionLinkBlock" data-content-element-type-key="3cbb3d60-8c37-4306-8aa9-266982d84f91" data-element-udi="umb://element/0a3b52129ae44bbfbac50c1a1488fb4e" data-col-span="3" data-row-span="1" style=" --umb-block-grid--item-column-span: 3; --umb-block-grid--item-row-span: 1; "> <action-link x-href="/for-organisations/advice-for-small-organisations/" x-text="Advice for small organisations" x-theme="yellow"></action-link> </div> </div> </div> </div> </div> </div> </div> </div> </main> <a href="#top" id="button-top" class="transition-opacity duration-500 flex items-center justify-center fixed right-4 bottom-4 z-10 rounded-full outline outline-white w-8 h-8 bg-primary opacity-0 hidden print:hidden"> <span class="icon icon-arrow-up text-white"></span> <span class="sr-only">Back to top</span> </a> <footer class="sticky top-[100vh] print:hidden"> <div class="lg:container px-4 border-t-2 border-dotted border-neutral-200 mt-6"> <div class="py-3"> <button onClick="window.print()" class="flex items-center group"> <i class="icon icon-printer text-lg text-white rounded-full p-1 bg-neutral-400"></i> <span class="ml-2 text-sm text-link group-hover:underline">Print this page</span> </button> </div> </div> <div class="bg-neutral-100"> <div class="lg:container px-4"> <div class="py-5 flex"> <div class="hidden md:block flex-auto"> <ul class="grid gap-4 grid-cols-4"> <li> <div class="mb-3"> <a href="/for-the-public/" class="font-serif text-serif-base text-link hover:underline">For the public</a> </div> <ul class="text-sm text-neutral-600 -mt-1"> <li class="mt-1"> <a href="/for-the-public/official-information/" class="hover:underline">Gwybodaeth swyddogol</a> </li> <li class="mt-1"> <a href="/for-the-public/nuisance-calls/" class="hover:underline">Galwadau niwsans</a> </li> </ul> </li> <li> <div class="mb-3"> <a href="/for-organisations/" class="font-serif text-serif-base text-link hover:underline">I sefydliadau</a> </div> <ul class="text-sm text-neutral-600 -mt-1"> <li class="mt-1"> <a href="/for-organisations/uk-gdpr-guidance-and-resources/" class="hover:underline">UK GDPR guidance and resources</a> </li> <li class="mt-1"> <a href="/for-organisations/foi/" class="hover:underline">Freedom of information</a> </li> <li class="mt-1"> <a href="/for-organisations/eir-and-access-to-information/" class="hover:underline">EIR and access to information</a> </li> <li class="mt-1"> <a href="/for-organisations/direct-marketing-and-privacy-and-electronic-communications/" class="hover:underline">Direct marketing</a> </li> <li class="mt-1"> <a href="/for-organisations/advice-and-services/" class="hover:underline">Advice and services</a> </li> </ul> </li> <li> <div class="mb-3"> <a href="/action-weve-taken/" class="font-serif text-serif-base text-link hover:underline">Action we've taken</a> </div> <ul class="text-sm text-neutral-600 -mt-1"> <li class="mt-1"> <a href="/action-weve-taken/enforcement/" class="hover:underline">Camau gorfodi</a> </li> <li class="mt-1"> <a href="https://icosearch.ico.org.uk/s/search.html?collection=ico-meta&profile=decisions&query" class="hover:underline">Hysbysiadau penderfynu</a> </li> <li class="mt-1"> <a href="https://ico.org.uk/action-weve-taken/audits-and-overview-reports/" class="hover:underline">Archwiliadau</a> </li> </ul> </li> <li> <div class="mb-3"> <a href="/about-the-ico/" class="font-serif text-serif-base text-link hover:underline">Am yr ICO</a> </div> <ul class="text-sm text-neutral-600 -mt-1"> <li class="mt-1"> <a href="/about-the-ico/who-we-are/" class="hover:underline">Pwy ydyn ni</a> </li> <li class="mt-1"> <a href="/about-the-ico/what-we-do/" class="hover:underline">Ein gwaith ni</a> </li> <li class="mt-1"> <a href="/about-the-ico/media-centre/" class="hover:underline">Media centre</a> </li> <li class="mt-1"> <a href="/about-the-ico/jobs/" class="hover:underline">Careers</a> </li> <li class="mt-1"> <a href="/about-the-ico/modern-slavery-statement/" class="hover:underline">Modern Slavery Statement</a> </li> </ul> </li> </ul> </div> <div class="hidden md:block flex-auto mx-8 border-l-2 border-dotted border-neutral-400"> </div> <div class="flex-auto"> <div class="font-serif text-serif-base text-link mb-3">Follow us</div> <ul class="flex flex-col sm:flex-row md:flex-col sm:flex-wrap sm:gap-x-4 gap-y-2 text-sm text-neutral-600"> <li class="sm:flex-auto md:flex-none"> <a class="flex items-center hover:underline" href="https://twitter.com/iconews" target="_blank"> <img class="rounded-full mr-2" src="/media2/g1plb1os/twitter.svg?width=24&height=24&v=1db03b86976f0f0" width="24" height="24" alt="Icon for the Twitter @ICONews social link" /> <span>Twitter @ICONews</span> </a> </li> <li class="sm:flex-auto md:flex-none"> <a class="flex items-center hover:underline" href="http://www.youtube.com/user/icocomms" target="_blank"> <img class="rounded-full mr-2" src="/media2/z3vdkkxj/youtube.svg?width=24&height=24&v=1db042ab32beee0" width="24" height="24" alt="Icon for the YouTube social link" /> <span>YouTube</span> </a> </li> <li class="sm:flex-auto md:flex-none"> <a class="flex items-center hover:underline" href="http://linkedin.com/company/information-commissioner's-office" target="_blank"> <img class="rounded-full mr-2" src="/media2/cgdpvn4n/linkedin.svg?width=24&height=24&v=1db042ab2dda7d0" width="24" height="24" alt="Icon for the LinkedIn social link" /> <span>LinkedIn</span> </a> </li> <li class="sm:flex-auto md:flex-none"> <a class="flex items-center hover:underline" href="http://facebook.com/ICOnews" target="_blank"> <img class="rounded-full mr-2" src="/media2/g2nhkyjv/facebook.svg?width=24&height=24&v=1db03b86b4b62d0" width="24" height="24" alt="Icon for the Facebook social link" /> <span>Facebook</span> </a> </li> <li class="sm:flex-auto md:flex-none"> <a class="flex items-center hover:underline" href="/about-the-ico/media-centre/e-newsletter/"> <img class="rounded-full mr-2" src="/media2/thzeryz5/envelope.svg?width=24&height=24&v=1db03b86a1d4310" width="24" height="24" alt="Icon for the Subscribe to our e-newsletter social link" /> <span>Tanysgrifio i鈥檔 e-gylchlythyr</span> </a> </li> </ul> </div> </div> </div> </div> <div class="bg-secondary"> <div class="lg:container px-4"> <div class="py-3 md:hidden"> <div class="font-serif text-center md:text-left text-white text-serif-base md:flex items-end md:pl-8 border-secondary border-dotted md:border-l-2"> <span>The ICO exists to empower you through information.</span> </div> </div> </div> </div> <div class="bg-primary"> <div class="lg:container px-4"> <div class="pt-2"> <ul class="-mx-3 flex flex-wrap text-white text-sm md:text-base"> <li class="mx-3 my-1"> <a href="/global/contact-us/" class="hover:underline">Cysylltwch 芒 ni</a> </li> <li class="mx-3 my-1"> <a href="/global/privacy-notice/" class="hover:underline">Hysbysiad preifatrwydd</a> </li> <li class="mx-3 my-1"> <a href="/global/cookies/" class="hover:underline">Cwcis</a> </li> <li class="mx-3 my-1"> <a href="/global/accessibility/" class="hover:underline">Hygyrchedd</a> </li> <li class="mx-3 my-1"> <a href="/about-the-ico/who-we-are/wales-office/" class="hover:underline">Cymraeg</a> </li> <li class="mx-3 my-1"> <a href="/global/request-publications/" class="hover:underline">Cyhoeddiadau</a> </li> <li class="mx-3 my-1"> <a href="/global/disclaimer/" class="hover:underline">Ymwadiad</a> </li> <li class="mx-3 my-1"> <a href="/global/copyright-and-re-use-of-materials/" class="hover:underline">© Copyright</a> </li> </ul> </div> <div class="py-5"> <div class="md:flex md:items-center"> <div class="pr-4 mb-2 md:mb-0"> <img class="w-10" src="/media2/r34b3hma/ogl.png?width=40&height=16&v=1db03b8684a57d0" width="40" height="16" alt="" /> </div> <div class="prose prose-sm prose-white"> <p>Mae鈥檙 testun i gyd ar gael o dan y <a href="http://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/">Drwydded Llywodraeth Agored v3.0</a>, ac eithrio lle dywedir yn wahanol.</p> </div> </div> </div> </div> </div> </footer> <script type="text/javascript" src="https://cc.cdn.civiccomputing.com/9/cookieControl-9.9.min.js"></script> <script type="application/json" id="cookie-settings"> {"apiKey":"dbf86e044f3ab8c4df852af5c7c6ceb2dd7678dd","necessaryCookies":[".AspNetCore.Antiforgery.*","language"],"statement":{"description":"For more detailed information, see our","name":"Tudalen cwcis","url":"https://ico.org.uk/global/cookies/","updated":"04/09/2024"},"text":{"title":"Cookies on the ICO website","intro":"We use some essential cookies to make this site work. We\u0027d like to set analytics cookies to understand how you use this site. We may use services from Vimeo and YouTube that may also use cookies.","acceptSettings":"Accept non-essential cookies","rejectSettings":"Reject non-essential cookies","necessaryTitle":"Essential cookies","necessaryDescription":"These cookies are necessary for core functionality, such as security and network management. They always need to be on.","closeLabel":"Cadw a chau","cornerButton":"Cookie options","on":"On","off":"Off"},"optionalCookies":[{"name":"analytics","label":"Cwcis dadansoddeg","description":"We use Silktide to measure how you use the ICO website. These cookies collect information about how you got to the site, the pages you visit and how long you spend on each page, and what you click on."},{"name":"videoPlayer","label":"Video player cookies","description":"We use services from Vimeo and YouTube to show you embedded videos on the ICO website. Vimeo and Google may use cookies to receive information about the videos you watch for analytics and advertising purposes."}]} </script> <script type="text/plain" id="silktide-settings">12d0c703744ea255b679f823daf1645f</script> <script type="text/javascript" src="/js/index.js?v=TYEGb_GH5SkF5NJRh7cZpx-oDut7QIjlT7FB7jistDU"></script> </body> </html>

CINXE.COM

UK GDPR guidance and resources | ICO