thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

UK GDPR

Retained version of GDPR in UK law post-Brexit, supplemented by the Data Protection Act 2018.

Definition

The UK GDPR largely mirrors the EU GDPR and is enforced by the Information Commissioner's Office (ICO). The Data (Use and Access) Act 2025 amended it, including changes on recognized legitimate interests, automated decision-making, and cookies. The UK has an EU adequacy decision, and uses the International Data Transfer Agreement or an addendum to EU SCCs for transfers.

Example

A UK retailer uses the ICO's IDTA for transfers to a processor in India.

Exam tip

The ICO is the UK supervisory authority; the UK uses the IDTA rather than EU SCCs alone.

Related terms