General information and working aids
The content on GDPR.me.uk provides general information about UK data protection and practical tools for organising a review. It is not advice about your particular facts, a legal opinion, a certification, a regulatory decision or a substitute for checking the current law and applicable guidance.
Your circumstances and jurisdiction
Obligations depend on your role, activities, data, sector, individuals and jurisdiction. UK GDPR, EU GDPR, law-enforcement and intelligence-services regimes are not interchangeable. Retention periods and professional duties may vary across the UK and between record types.
No professional engagement through browsing
Accessing the site, completing an assessment or downloading a template does not create a solicitor-client, notarial, DPO or consultancy relationship with the founder or any associated practice. A professional engagement requires a separate agreement. Do not send confidential case information through an unagreed contact route.
Assessment limitations
Results depend on your inputs. A green result records your assessment of specified controls and evidence; it does not establish compliance. The tools cannot verify documents, interview staff, inspect actual processing, execute agreements, submit notifications or guarantee a regulator’s view. Suggested remediation dates do not extend legal deadlines.
Currency and external sources
Sources and law can change. Review dates show when editorial checks were made; they are not a promise of continuous monitoring. External links are provided for convenience. Check the relevant official source, including commencement and transitional provisions, before making a consequential decision.
Responsibility and liability
To the extent permitted by applicable law, no guarantee is given that the publication or tools are complete, error-free, continuously available or suitable for a particular purpose. Nothing here excludes or restricts liability where exclusion or restriction would be unlawful, including liability for fraud or fraudulent misrepresentation, or death or personal injury caused by negligence. Statutory rights that cannot lawfully be excluded remain unaffected.
Use the appropriate professional support
Seek suitably qualified advice where the consequences, complexity or uncertainty require it. For an ongoing incident or high-risk processing, take the necessary operational steps and manage statutory deadlines promptly.