The guidance library
UK GDPR guidance for a documented review.
Understand the obligation, review the evidence and keep a useful decision record.
Ten connected UK GDPR topics
Compliance gap audit
Build a defensible picture of your data-protection controls. Compare the policies you hold with the work people actually do, then turn the gaps into an owned, prioritised plan.
Read the guide REVIEW 69Data protection impact assessments
Identify risks to people before a project starts. Record why processing is necessary, how risks will be reduced and who accepts the remaining risk.
Read the guide REVIEW 70Records of processing
Keep one maintainable view of what personal information your organisation uses, why it uses it, where it goes and when it should be deleted.
Read the guide REVIEW 71Lawful basis & privacy notices
Match each purpose to a valid legal basis and explain it clearly to the people affected. Test what happens in practice against what your notices promise.
Read the guide REVIEW 72Retention & deletion
Set justified retention periods by record type, then make deletion work across systems, suppliers and backups while preserving information subject to a valid legal hold.
Read the guide REVIEW 73International transfers
Trace overseas hosting, suppliers and remote support. Record the transfer route, test the safeguards and resolve gaps before data moves.
Read the guide REVIEW 74Breach response
Know who acts, when to escalate and what evidence to preserve. Test a response plan before an incident becomes a deadline.
Read the guide REVIEW 75Subject access requests
Follow a request from first contact to secure disclosure, with a defensible search, proportionate identity checks and a clear exemption record.
Read the guide REVIEW 76DPO & ICO fee
Keep three decisions distinct: whether a DPO is required, whether a territorial representative is needed and whether the data protection fee is payable.
Read the guide REVIEW 77Cookies & direct marketing
Connect the banner, tags and marketing lists to the rules that actually apply. Test both what the interface says and what the technology does.
Read the guide