Jurisdiction Guide
United Kingdom Privacy & Data Protection Laws
Every regime below can apply to a business handling United Kingdom residents' data, depending on whether you have an established presence there, actively offer goods or services to residents, or monitor their behavior. This is a general reference, not a determination for your specific business — run the full questionnaire to see which of these actually apply to you.
Comprehensive Privacy Law · 1
The UK's post-Brexit retained version of GDPR, carrying over the same Article 3 extraterritoriality test: applies to organizations established in the UK, or non-UK organizations offering goods/services to UK residents or monitoring their behavior there. Substantively very similar to EU GDPR, enforced separately by the UK's ICO rather than an EU data protection authority. UK data-reform legislation has been in progress in recent years — the exact current amending Act should be reconfirmed against ico.org.uk before relying on citation specifics.