The UK General Data Protection Regulation is the United Kingdom's post-Brexit data protection framework, retaining the substance of the EU GDPR as domestic law through the European Union (Withdrawal) Act 2018, supplemented by the Data Protection Act 2018.
The UK GDPR mirrors the EU GDPR in most respects — same principles, lawful bases, data subject rights, and accountability obligations. Key differences include independent adequacy status, UK-specific standard contractual clauses (IDTA), and the ICO's independent enforcement approach.
Platforms serving UK users must comply with both EU GDPR and UK GDPR as separate legal regimes, often with UK-specific supplements in their privacy policies.
ConductAtlas maps governance language to potentially relevant regulatory frameworks. Regulatory applicability and enforceability may vary by jurisdiction, enforcement context, and individual circumstances. This page is informational and does not constitute legal advice. Methodology
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.
ConductAtlas captures policy documents daily, classifies provisions by regulatory framework, and flags changes that affect UK GDPR obligations. Every change is archived with cryptographic verification.