GDPR (General Data Protection Regulation)

The UK GDPR is the data-protection law that governs how organisations in the United Kingdom must handle personal data, and it gives individuals a set of rights over their own information — including the right of access, the right to erasure, and the right to object. It is the United Kingdom's version of the EU General Data Protection Regulation (GDPR), the wider European framework it is based on.