Data protection principles - guidance and resources
-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
The guidance on this page is suitable for large businesses in the public, private and third sectors. Small businesses should use the resources on our small business web hub.
Brief guidance
A guide to the data protection principles
The principles of the UK GDPR and how to apply them in your organisation.
In your sector
Transparency in health and social care
What is transparency, how to develop and provide transparency information and how to assess whether you are being transparent in the health and social care sector.
Resources
Records management self-assessment checklist
Assess your records management procedures and risks to people’s personal information. Includes record creation, storage and disposal, access, tracking and off-site storage.
Training videos: data protection principles
Recordings of ICO staff training on the data protection principles, available for you to reuse.