This subtopic provides guidance on various aspects of the United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR) concerning accountability, governance and compliance. This includes identifying and assessing data protection risks, the role of data protection officers (DPOs), data mapping, data protection impact assessments (DPIAs) and the appointment of representatives.
For an introduction to the UK GDPR, see Practice Notes: Introduction to the EU GDPR and UK GDPR and The UK General Data Protection Regulation (UK GDPR).
This subtopic contains:
an introduction to the UK GDPR
guidance on how to identify and assess data protection risks
accountability
data protection by design and default
guidance relating to DPOs
guidance on data mapping
guidance on DPIAs
information on appointing representatives
To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.
**Trials are provided to all LexisNexis content, excluding Practice Compliance, Practice Management and Risk and Compliance, subscription packages are tailored to your specific needs. To discuss trialling these LexisNexis services please email customer service via our online form. Free trials are only available to individuals based in the UK, Ireland and selected UK overseas territories and Caribbean countries. We may terminate this trial at any time or decide not to give a trial, for any reason. Trial includes one question to LexisAsk during the length of the trial.
The Information Commission’s Office (ICO) has issued a formal reprimand and an enforcement notice to the Metropolitan Police Service (MPS) after...
The European Data Protection Board (EDPB) has adopted a statement providing preliminary guidance on smart glasses under the EU’s General Data...
MLex: Privacy information and routes to exercise data rights have been updated by Anthropic, Apple, Meta and OpenAI following UK regulatory scrutiny,...
The Cabinet Office, together with the AI Security Institute, National Cyber Security Centre (NCSC) and Department for Digital, Culture, Media and...
The UK General Data Protection Regulation (UK GDPR)—Navigator [Archived]ARCHIVED: This Practice Note is not maintained and is for background information only. This archived Practice Note i) provides navigational information on the UK GDPR and accompanying Data Protection Act 2018 and ii) briefly
Priority between loss reliefs in loss making companiesWhy does it matter?A company that is a member of a group and has incurred any of the types of losses available for surrender by way of group relief may, without any further rules, have more than one way in which to use the loss. There are a
If a rentcharge is shown as being informally exonerated on title information, does this apply to the current registered owner? Or does the informal exoneration only apply to the parties to the document which informally exonerated the rentcharge?This Q&A considers the situation where, at some point
Contributory negligence in personal injury claimsContributory negligence is a partial defence which can lead to a discount in damages.Other defences may also be relevant. See Practice Notes: Did the claimant consent to the risk of injury? and Was the claimant involved in an illegal activity?If a
0330 161 1234