January 14, 2019

The ICO says that the guide is for data protection officers and others who have day-to-day responsibility for data protection. It is aimed at small and medium-sized organisations, but it may be useful for larger organisations too.

The guide covers the Data Protection Act 2018 (DPA 2018), and the General Data Protection Regulation (GDPR) as it applies in the UK. It is split into five main sections:

1. Introduction to data protection;
2. Guide to the GDPR;

• Guide to Law Enforcement Processing;

1. Guide to Intelligence Services Processing; and
2. Key data protection themes.

Where relevant, this guide also links to more detailed guidance and other resources, including ICO guidance, statutory ICO codes of practice, and European guidelines published by the European Data Protection Board (EDPB). To access the guide in full, click here.