INDEPENDENT UK DATA PROTECTION GUIDANCESource review: 1 November 2026 Our editorial standards ↗

About the reference desk

About GDPR.me.uk & editorial standards

Independent UK data protection guidance with visible sources, practical tools and clear professional boundaries.

Purpose

GDPR.me.uk is an independent UK data protection reference desk founded by Mihail Florin Gavrila. It brings together clear explanations, official sources and working tools for organisations that need to make and record practical decisions. The publication follows the guidance, checks and templates approach used by AML.me.uk.

Editorial standards

  • Start with legislation, commencement instruments and the relevant official regulator guidance.
  • Separate legal obligations, regulator recommendations and our practical implementation suggestions.
  • Show source-review dates and distinguish an event date from the date we publish an explainer.
  • Identify jurisdiction, activity-specific exceptions, uncertainty and limits.
  • Correct material errors and recheck affected content and tools.
  • Do not claim ICO approval, regulatory affiliation, a completed professional audit or verified compliance from a questionnaire.

How content is prepared

The launch content was prepared with AI-assisted research and comparison of official sources, reviewed against the legal position identified on 1 November 2026. This is not a representation that every page has received independent human legal review. Follow the linked sources and obtain appropriate advice for decisions that depend on your circumstances.

The assessment and templates

These resources help organise your work. A questionnaire cannot independently establish whether a policy is followed, a contract is binding, a system is secure or processing is lawful. Read the assessment methodology before relying on a result.

Professional boundaries

Using this publication does not instruct the founder or any professional practice, establish a solicitor-client or notarial relationship, or create a professional retainer. Services, if separately agreed, require their own scope and terms.

Editorial attribution and review

Guides and briefings are attributed to the GDPR.me.uk editorial desk, the publication’s editorial name. This attribution describes the publication responsible for the content; it does not certify a named professional’s authorship or legal approval. Independent named legal review has not yet been recorded for these pages.

Corrections and source changes

Use the corrections route to identify the affected page, statement, source and proposed correction. Material updates should change the relevant review date and be recorded in the publication history.

Content update — 2 November 2026: clarified editorial attribution and the status of independent named review. The existing legal-source baseline is 1 November 2026.