Data protection laws in the UK are intended to ensure information about living individuals (within the definition of ‘personal data’) is used fairly and responsibly.
To help ensure that, UK data protection laws impose a large number of obligations on those ‘processing’ personal data (and on controllers of such processing) and grant rights to those whose personal data is processed (the ‘data subjects’). In summary, ‘processing’ includes doing almost anything with personal data, including storing, sharing, deleting or using it.
This subtopic primarily addresses UK data protection laws that apply to ‘general’ processing of personal data. The United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR) regime is referred to as ‘general’ since there are special regimes applicable to the processing of personal data in niche areas such as law enforcement processing and processing by the intelligence services that are unlikely to be relevant to most organisations.
For a more detailed high-level introduction to the data protection landscape in the UK, including non-UK GDPR regimes, see Practice Note: Data protection law—new starter guide.
The obligations under the UK GDPR are extensive,...
To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.
**Trials are provided to all LexisNexis content, excluding Practice Compliance, Practice Management and Risk and Compliance, subscription packages are tailored to your specific needs. To discuss trialling these LexisNexis services please email customer service via our online form. Free trials are only available to individuals based in the UK, Ireland and selected UK overseas territories and Caribbean countries. We may terminate this trial at any time or decide not to give a trial, for any reason. Trial includes one question to LexisAsk during the length of the trial.
MLex: Privacy information and routes to exercise data rights have been updated by Anthropic, Apple, Meta and OpenAI following UK regulatory scrutiny,...
The Cabinet Office, together with the AI Security Institute, National Cyber Security Centre (NCSC) and Department for Digital, Culture, Media and...
HM Courts & Tribunals Service (HMCTS) has published a position statement on the judicial use of Artificial Intelligence (AI), setting out expectations...
The Information Commissioner's Office (ICO) has launched a call for evidence to inform its approach to applying data protection law to the distinctive...
The UK General Data Protection Regulation (UK GDPR)—Navigator [Archived]ARCHIVED: This Practice Note is not maintained and is for background information only. This archived Practice Note i) provides navigational information on the UK GDPR and accompanying Data Protection Act 2018 and ii) briefly
Contributory negligence in personal injury claimsContributory negligence is a partial defence which can lead to a discount in damages.Other defences may also be relevant. See Practice Notes: Did the claimant consent to the risk of injury? and Was the claimant involved in an illegal activity?If a
Can shares in a limited company that have not been paid-up at all be cancelled?A limited company having a share capital may not alter that share capital, except in the ways listed in section 617 of the Companies Act 2006 (CA 2006). Shares in a company cannot simply be cancelled without following an
Glossary—Latin legal termsDespite attempts in recent years to simplify the language used in legal cases, there are still a number of Latin phrases commonly used in personal injury claims. The following Latin phrases are listed in alphabetical order:Latin termDefinitionMeaningActa iure imperiiLegal
0330 161 1234