ہوم › قوانین کی لائبریری › UK GDPR / DPA 2018
UK GDPR / DPA 2018
UK General Data Protection Regulation and Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025)
دو ذرائع سے تصدیق شدہ. آخری تصدیق 10 اکتوبر، 2026
اگلی مکمل جانچ: . ریگولیٹرز کی خبریں ہر ماہ دیکھی جاتی ہیں؛ تبدیلیاں درج ہوتی ہیں: تبدیلیوں کا ریکارڈ.
اس صفحے کا حوالہ دیں: GlanceDesk Jurisdiction, “UK GDPR / DPA 2018 (United Kingdom)”, glancedeskjurisdiction.com/laws/uk-gdpr, last verified 10 October 2026.
United Kingdom پرائیویسی
- حیثیت
- In force since 1 Jan 2021 (retained from EU GDPR); DUAA 2025 data protection changes fully in force by 19 June 2026.✓
- یہ کن پر لاگو ہوتا ہے
- Organisations processing personal data in the context of a UK establishment, and non-UK organisations offering goods/services to, or monitoring the behaviour of, people in the UK.✓
- سائز کی حدیں
- None — applies regardless of size.✓
- ریگولیٹر
- Information Commission (replaced the Information Commissioner's Office on 30 Sep 2026; still uses the 'ICO' name)✓
- خلاف ورزی یا واقعے کی رپورٹنگ
- Report notifiable breaches to the Information Commission without undue delay and, where feasible, within 72 hours. Tell affected individuals without undue delay if high risk. PECR breaches by telecoms providers: without undue delay and, where feasible, within 72 hours (PECR reg 5A(2), since 20 Aug 2025).✓
- ذاتی ڈیٹا کی درخواستوں کے جواب کی آخری تاریخ
- 1 month, extendable by 2 months for complex or numerous requests. For access requests the clock pauses while you seek info needed to scope the request (Art 12A, requests from 5 Feb 2026). Searches need only be reasonable and proportionate.✓
- ڈیٹا پروٹیکشن آفیسر
- DPO mandatory for public authorities and where core activities involve large-scale systematic monitoring or large-scale special-category/criminal data (same tests as EU GDPR).✓
- مقامی نمائندہ
- Non-UK organisations with no UK establishment that target or monitor people in the UK must appoint a UK representative in writing, unless processing is occasional and low-risk or they are a public authority.✓
- ڈیٹا بیرونِ ملک بھیجنا
- Transfers need UK adequacy regulations (data bridges), or the IDTA / UK Addendum to EU SCCs, or BCRs. Since 5 Feb 2026 the adequacy test is whether protection is 'not materially lower'; existing TRAs remain usable.✓
- کوکیز اور رضامندی
- PECR: consent needed for non-essential cookies, but since 5 Feb 2026 low-risk statistical/analytics and functionality cookies can be set without consent if users get clear info and an opt-out. Ad/tracking cookies still need consent.✓
- زیادہ سے زیادہ سزا
- Up to £17.5 million or 4% of worldwide annual turnover, whichever is higher (lower tier £8.7m or 2%). PECR fines raised to the same level from 5 Feb 2026.✓
جن حقائق پر “تصدیق جاری ہے” لکھا ہے ان کی ابھی تصدیق ہو رہی ہے اور انہیں جواب کے طور پر نہیں دیا جاتا۔
آپ کو کیا کرنا ہوگا✓
- Map processing and choose a lawful basis; consider the new 'recognised legitimate interests' list.
- Offer an easy (e.g. online) complaints route; acknowledge complaints within 30 days (from 19 Jun 2026).
- Answer DSARs within one month using reasonable and proportionate searches.
- Review cookie banners: drop consent only for exempt analytics/functionality cookies.
- Add safeguards (info, human review, challenge) to significant automated decisions.
- Report notifiable breaches to the ICO within 72 hours.
- Use IDTA/UK Addendum for restricted transfers outside the UK.
حالیہ تبدیلیاں
DUAA 2025 (Royal Assent 19 Jun 2025): reasonable/proportionate DSAR searches (on Royal Assent); cookie exemptions, recognised legitimate interests, ADM reform, new transfer test, PECR fines (5 Feb 2026); complaints handling (19 Jun 2026); ICO became the Information Commission (30 Sep 2026).✓
Termly
Create and maintain a privacy policy, cookie banner and request forms.
Create your privacy policy with Termlyپارٹنر لنک: آپ خریدیں تو آپ پر کسی اضافی لاگت کے بغیر ہمیں کمیشن مل سکتا ہے۔ اس کا ہمارے قانونی مواد پر کبھی اثر نہیں ہوتا۔ ملحقہ (affiliate) انکشاف
ذرائع
- بنیادی ذریعہ: https://www.legislation.gov.uk/eur/2016/679/contents
- دوسرا ذریعہ: https://bratby.law/data-use-and-access-act-2025-commencement/
- ریگولیٹر: Information Commission (replaced the Information Commissioner's Office on 30 Sep 2026; still uses the 'ICO' name)
آزادانہ جانچ کے لیے استعمال ہونے والے ذرائع (24)
- https://ico.org.uk/about-the-ico/what-we-do/legislation-we-cover/data-use-and-access-act-2025/the-data-use-and-access-act-2025-what-does-it-mean-for-organisations/
- https://www.legislation.gov.uk/uksi/2026/82/made
- https://www.dlapiperdataprotection.com/index.html?t=law&c=GB
- https://www.legislation.gov.uk/eur/2016/679/article/3
- https://www.legislation.gov.uk/eur/2016/679/article/33
- https://www.legislation.gov.uk/uksi/2026/386/body/made
- https://www.lewissilkin.com/insights/2026/09/29/what-the-icos-transformation-into-the-information-commission-means-for-your-orga-102o3ni
- https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guide-to-pecr/communications-networks-and-services/security-breaches/
- https://www.osborneclarke.com/insights/regulatory-outlook-september-2025-data-law
- https://www.legislation.gov.uk/ukpga/2025/18/section/76
- https://www.legislation.gov.uk/ukpga/2025/18/section/142
- https://www.legislation.gov.uk/eur/2016/679/article/37
- https://www.legislation.gov.uk/eur/2016/679/article/27
- https://legalvision.co.uk/data-privacy-it/uk-gdpr-article-27-representatives/
- https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/international-transfers-a-guide/
- https://www.lewissilkin.com/insights/2026/02/09/uk-data-reform-becomes-reality-what-this-means-for-you-and-what-you-need-to-do-n-102mh5x
- https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/guidance-on-the-use-of-storage-and-access-technologies/what-are-the-exceptions/
- https://www.legislation.gov.uk/ukpga/2018/12/section/157
- https://www.legislation.gov.uk/ukpga/2025/18/section/103
- https://www.legislation.gov.uk/ukpga/2025/18/section/80
- https://www.legislation.gov.uk/uksi/2003/2426/regulation/5A
- https://www.legislation.gov.uk/eur/2016/679/contents
- https://www.legislation.gov.uk/ukpga/2025/18/contents
- https://www.legislation.gov.uk/ukpga/2018/12/contents
= دو آزاد ذرائع سے تصدیق شدہ، جن میں کم از کم ایک سرکاری ہے۔ ہم تصدیق کیسے کرتے ہیں
صرف معلومات، قانونی مشورہ نہیں۔ قوانین بدلتے رہتے ہیں؛ اس صفحے پر انحصار کرنے سے پہلے ریگولیٹر یا کسی مستند وکیل سے تصدیق کریں۔ کوئی غلطی نظر آئی؟ ای میل کریں contact@