The retained EU GDPR as incorporated into UK law after Brexit.
UK GDPR is the EU GDPR as retained in UK law following Brexit, with modifications for the UK context. It maintains GDPR's core principles and requirements—lawful basis, individual rights, breach notification—but applies to UK domestic processing. Organisations processing both UK and EU personal data must comply with both UK GDPR and EU GDPR. The ICO is the supervisory authority for UK GDPR.
Why It Matters
The DSC Perspective:
Post-Brexit, UK organisations must understand both UK GDPR and EU GDPR if processing EU data. The frameworks are similar but may diverge over time as the UK develops its own data protection approach.