In the UK, the main pieces of legislation that govern data privacy are the General Data Protection Regulation (2016/679) (GDPR) and the Data Protection Act 2018 (DPA 2018). The Information Commissioner’s Office (ICO) is responsible for enforcing data privacy legislation. ICO’s purpose is to uphold information rights in the public interest and promote openness by public bodies and data privacy for individuals.
