UK General Data Protection Regulation

The UK's post-Brexit retained version of GDPR, carrying over the same Article 3 extraterritoriality test: applies to organizations established in the UK, or non-UK organizations offering goods/services to UK residents or monitoring their behavior there. Substantively very similar to EU GDPR, enforced separately by the UK's ICO rather than an EU data protection authority. UK data-reform legislation has been in progress in recent years — the exact current amending Act should be reconfirmed against ico.org.uk before relying on citation specifics.