GDPR Policy

The General Data Protection Regulation (GDPR) is a regulation in the European Union (EU) that outlines the rights of individuals and the obligations of organisations that control or process personal data. The GDPR applies to all organisations that process the personal data of individuals located in the EU, regardless of the organisation’s location.

The UK GDPR is the UK’s implementation of the GDPR. It is a law that sets out rules for how organisations can collect, use, and store personal data. The UK GDPR applies to all organisations that process personal data of individuals located in the UK, regardless of the organisation’s location.

The UK GDPR is similar to the GDPR, but there are some key differences. For example, the UK GDPR does not have the same provisions for data transfers to countries outside of the EU.

The UK GDPR is a complex law, and organisations that process personal data should seek legal advice to ensure compliance.

Here are some of the key provisions of the UK GDPR:

Lawfulness, fairness, and transparency: Organisations must process personal data lawfully, fairly, and in a transparent manner.
Purpose limitation: Personal data must be collected for specified, explicit, and legitimate purposes.
Data minimisation: Personal data must be adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
Accuracy: Personal data must be accurate and, where necessary, kept up to date.
Storage limitation: Personal data must be kept for no longer than is necessary for the purposes for which it is processed.
Integrity and confidentiality: Personal data must be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.
Accountability: Organisations must be able to demonstrate compliance with the GDPR.

The UK GDPR also gives individuals a number of rights, including the right to: