Clear, practical guides to GDPR and data protection for UK organisations — the UK GDPR, the Data Protection Act 2018, the data protection principles, individual rights, lawful bases, data breaches and more.
UK nuisance messaging statistics: ICO PECR penalties of £1.445 million in 2025/26, 48,395 call/text concerns and dated enforcement cases.
Read more →
Official UK data protection preparedness figures for 2025/26, with the correct survey populations, training measures and current DUAA context.
Read more →
NHS and health-sector breach statistics: 647 ICO health reports in Q4 2025, Synnovis service disruption, the Advanced fine and the WannaCry record.
Read more →
UK children’s online privacy statistics: close to five million child users affected by ICO-led changes, latest Ofcom findings and dated enforcement cases.
Read more →
UK FOI statistics: 94,526 monitored central-government requests in 2025, 19,628 in April–June 2026 and 10,713 ICO complaints in 2025/26.
Read more →
UK identity fraud data: 242,003 Cifas cases in 2025, nearly 130,000 in January–June 2026, and £54 million in card ID theft losses in 2025.
Read more →
UK cookie consent statistics: 99% of the top 1,000 websites passed ICO checks in 2025/26, survey evidence and current PECR exceptions.
Read more →
UK cyber crime statistics: 798,000 CSEW computer misuse incidents in England and Wales, 43% of UK businesses identifying attacks and NCSC response counts.
Read more →
UK cyber insurance statistics: 47% business uptake, 10% standalone cover, £197 million paid in 2024 and Marsh’s Q2 2026 pricing index.
Read more →
UK CCTV and surveillance figures: dated council and police camera returns, Met facial recognition results and the different data protection rules for operators.
Read more →
ICO complaints statistics: 76,743 received in 2025/26, response performance, outcomes, sector data and current complaint-handling rules.
Read more →
UK subject access statistics: 48.6% of published Q1 2026/27 ICO completed cases concern Article 15, plus dated workload evidence and current SAR rules.
Read more →
UK ransomware statistics: 617 ICO reports in 2025, 1% business survey prevalence, 2026 payment and recovery research, and dated incident case studies.
Read more →
UK cyber skills statistics: an estimated 145,900 workers in December 2025, 57% of businesses with basic skills gaps and £58,050 median advertised pay.
Read more →
UK AI and privacy statistics: 30% business AI adoption in September 2026, public attitudes to automated decisions and business governance surveys.
Read more →
UK phishing statistics: 38% of businesses identified attacks in the 2025/26 survey; NCSC reporting totals, payment-fraud context and current reporting routes.
Read more →
UK breach statistics checked October 2026: ICO reports, business exposure, £3.13 m IBM breach-cost estimate and the latest ONS computer-misuse data.
Read more →
UK GDPR fine statistics: eight penalty notices totalling £32.4 m in 2025/26, major cases and appeals, PECR penalties and current legal maximums.
Read more →
Human error and UK breach statistics: ICO non-cyber incidents, misdirected emails and the distinct measures in Verizon’s 2026 DBIR.
Read more →
The seven UK GDPR principles explained, including lawful processing, purpose limitation, minimisation, retention, security and accountability.
Read more →
How to distinguish controllers, joint controllers and processors, with Article 28 contract requirements and practical examples.
Read more →
UK data protection rules for CCTV: lawful use, household scope, risk assessments, retention, access requests and smart doorbell settings.
Read more →
UK cookie rules after the DUAA: the five PECR exceptions, consent, objection controls, third-party responsibilities and current penalty limits.
Read more →
How to assess and respond to a personal data breach, including the 72-hour reporting rule, individual notifications and documented risk decisions.
Read more →
How to set UK GDPR retention periods, with separate PAYE, minimum-wage, company-record and health-record requirements and backup controls.
Read more →
UK data protection penalties explained: statutory maximums, ICO methodology, selected cases, appeal status and 2025/26 annual figures.
Read more →
The seven UK GDPR lawful bases, recognised legitimate interest, valid consent, children's information and withdrawal explained.
Read more →
What Articles 13 and 14 require in privacy information, when to provide it, and how to use clear layered notices and maintain accurate details.
Read more →
Article 30 processing records explained: who must keep them, the small-organisation exception, required fields and a practical example.
Read more →
A guide to UK GDPR individual rights, response deadlines, exceptions and the current safeguards for significant automated decisions.
Read more →
UK and EU GDPR compared as of October 2026: lawful bases, automated decisions, cookies, transfers, complaints and the Information Commission.
Read more →
UK GDPR explained, including lawful bases, individual rights, penalties and the Data (Use and Access) Act changes in force by October 2026.
Read more →
What counts as personal data under UK GDPR, including indirect identifiers, special category information, criminal offence data and anonymisation.
Read more →
The key GDPR dates: entry into force in 2016, application from 25 May 2018, UK GDPR from 2021 and DUAA changes through September 2026.
Read more →
Who UK GDPR applies to: organisational and overseas processing, household use, small businesses, representatives and the ICO's role.
Read more →Our CPD-accredited GDPR & Data Protection Course gives you an instant printable certificate the moment you pass — from just £14.