Global Compliance Library

United Kingdom

UK GDPR, DPA 2018, the DUAA 2025, NIS and Cyber Essentials.

UK GDPR / DPA 2018

Conditional

UK GDPR & Data Protection Act 2018

Legislation / Act

Authority:: UK Parliament; Information Commissioner's Office (ICO)
Status:: In force (as amended by the DUAA 2025)
Applies to:: Controllers/processors in the UK and those targeting individuals in the UK.

Official source ↗

DUAA 2025

Conditional

Data (Use and Access) Act 2025

Legislation / Act

Authority:: UK Parliament
Status:: Enacted; provisions commencing in stages
Applies to:: Amends (does not replace) UK GDPR, the DPA 2018 and PECR.

View details →

Cyber Essentials

Voluntary

Cyber Essentials / Cyber Essentials Plus

Voluntary standard

Authority:: UK National Cyber Security Centre (NCSC), delivered by IASME
Status:: Current scheme
Applies to:: Organisations seeking a baseline cyber certification (sometimes required for UK government contracts).

Official source ↗

This library provides general information for orientation only. It is not legal advice, a determination of applicability, or a substitute for formal certification or professional counsel. Verify current legal status, editions and dates against the official source before relying on any entry. Inclusion of a jurisdiction or instrument here is informational and does not imply that Srida IT provides regulated services, holds local authorisation, or has a presence in that jurisdiction.

Need to assess your readiness against United Kingdom requirements?

Request an Assessment