COVID-19 and Return to Work Compliance Resources More Info


You are here:
Estimated reading time: 2 min
In this article
Information Commissioner’s Office, “Guide to the GDPR”, retrieved on 28th May 2018, licensed under the Open Government Licence.


The Guide to the GDPR explains the provisions of the GDPR to help organisations comply with its requirements. It is for those who have day-to-day responsibility for data protection.

The GDPR forms part of the data protection regime in the UK, together with the new Data Protection Act 2018 (DPA 2018). The main provisions of this apply, like the GDPR, from 25 May 2018.

This guide refers to the DPA 2018 where it is relevant includes links to relevant sections of the GDPR itself, to other ICO guidance and to guidance produced by the EU’s Article 29 Working Party – now the European Data Protection Board (EDPB).

We intend the guide to cover the key points that organisations need to know. From now we will continue to develop new guidance and review our resources to take into account what organisations tell us they need. In the longer term we aim to publish more guidance under the umbrella of a new Guide to Data Protection, which will cover the GDPR and DPA 2018, and include law enforcement, the applied GDPR and other relevant provisions.

Further reading

For organisations

Data protection self assessment toolkit

For organisations (external link)

For a more detailed understanding of the GDPR it’s also helpful to read the guidelines produced by the EU’s Article 29 Working Party – which has now been renamed the European Data Protection Board (EDPB). The EDPB includes representatives of the data protection authorities from each EU member state, and the ICO is the UK’s representative. The ICO has been directly involved in drafting many of these. We have linked to relevant EU guidelines throughout the Guide to GDPR.
ICO produced many guidance documents on the previous Data Protection Act 1998. Even though that Act is no longer in force, some of them contain practical examples and advice which may still be helpful in applying the new legislation. While we are building our new Guide to Data Protection we will keep those documents accessible on our website, with the proviso that they cannot be taken as guidance on the DPA 2018.
ICO previously produced an Introduction to the Data Protection Bill as it was going through Parliament. We will update this document to reflect the final text of the DPA 2018 and publish it as soon as possible.
ICO also published a guide to the law enforcement provisions in Part 3 of the Data Protection Bill, which implement the EU Law Enforcement Directive. We will update this to reflect the relevant provisions in the DPA 2018.
Was this article helpful?
Dislike 0
Views: 95