The UK General Data Protection Regulation is the United Kingdom's post-Brexit data protection framework, retaining the substance of the EU GDPR as domestic law through the European Union (Withdrawal) Act 2018, supplemented by the Data Protection Act 2018.
The UK GDPR mirrors the EU GDPR in most respects — same principles, lawful bases, data subject rights, and accountability obligations. Key differences include independent adequacy status, UK-specific standard contractual clauses (IDTA), and the ICO's independent enforcement approach.
Platforms serving UK users must comply with both EU GDPR and UK GDPR as separate legal regimes, often with UK-specific supplements in their privacy policies.
ConductAtlas maps governance language to potentially relevant regulatory frameworks. Regulatory applicability and enforceability may vary by jurisdiction, enforcement context, and individual circumstances. This page is informational and does not constitute legal advice. Methodology
Showing 30 of 2399 provisions. View all →
Get alerted when platforms change their policies — including UK GDPR-relevant provisions.
Subscribe to Monitor — $19/moConductAtlas tracks UK GDPR-relevant provisions across 73 platforms. Each platform's specific provisions are classified by severity and mapped to UK GDPR requirements.
ConductAtlas captures policy documents daily, classifies provisions by regulatory framework, and flags changes that affect UK GDPR obligations. Every change is archived with cryptographic verification.