Guide to Intelligence Services Processing

The Guide to Intelligence Services Processing is part of our Canllaw i Ddiogelu Data . It is for those who have day-to-day responsibility for data protection in the intelligence services.

It explains the data protection regime that applies to the intelligence services. It covers Part 4 of the Data Protection Act 2018 (DPA), which is separate from the UK GDPR regime.

It explains each of the data protection principles, rights, obligations and exemptions. It summarises the key points you need to know and answers frequently asked questions.

Where relevant, this guide also links to more detailed guidance and other resources, including ICO guidance.

This section only covers processing by the intelligence services. If you are not one of the intelligence services, you need to read our Guide to the UK GDPR or Guide to Law Enforcement Processing.