The UK GDPR and the Data Protection Act 2018 govern personal data in the UK, enforced by the Information Commissioner’s Office. They mirror the EU GDPR with UK-specific provisions on transfers, exemptions and enforcement, and continue to evolve through UK reform legislation.
We extend your GDPR programme to the UK, including transfer mechanisms such as the International Data Transfer Agreement and UK addendum.
Who it is for
- Organisations with UK customers, users or employees
- Processors serving UK clients
What you gain
- One programme covering EU and UK
- Lawful UK transfers
How we get you compliant
Applicability and scoping
Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
Data and process mapping
Build a record of processing or control inventory so obligations can be tied to real systems and owners.
Gap assessment
Measure current practice against each obligation and rank the gaps by legal and business risk.
Remediation roadmap
Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
Evidence and ongoing monitoring
A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.