Clear, practical guides to GDPR and data protection for UK organisations — the UK GDPR, the Data Protection Act 2018, the data protection principles, individual rights, lawful bases, data breaches and more.
UK nuisance-call and spam-text statistics: the ICO has fined firms £4.63m under PECR, the max fine jumped to £17.5m in Feb 2026, and 44,404 complaints in 2024.
Read more →
UK GDPR compliance statistics for 2026: data-protection training halved to 11% of firms, just 62% know the ICO and only 10% of micro businesses train staff.
Read more →
NHS data breach statistics for 2026: health tops ICO breach reports, the Synnovis attack postponed 11,000+ appointments and cost £32.7m, plus a first UK cyber-linked death.
Read more →
UK children's online privacy statistics 2026: the ICO Children's Code covers up to 11.7m children, 40% of under-13s have a social media profile, and Reddit was fined £14.47m.
Read more →
Freedom of information statistics for 2026: 94,526 FOI requests to UK central government in 2025 (a record), 87% answered in time and 35% refused in full.
Read more →
UK identity fraud statistics 2026: a record 242,003 cases in 2025 — 54% of all fraud filings — plus account takeover, SIM-swap and fraud-loss data.
Read more →
UK cookie consent stats 2026: over 95% of the top 1,000 websites now pass ICO checks, giving c.40m users more tracking control, plus DUAA rule changes.
Read more →
The CSEW estimated 686,000 computer misuse incidents and 43% of UK businesses were breached in 2025/26. Official UK cyber crime statistics for 2026, all dated.
Read more →
UK cyber insurance statistics 2026: uptake plateaued at 45% of businesses, and UK insurers paid ~£197m in cyber claims for 2024 — a 230% rise.
Read more →
UK CCTV and surveillance statistics for 2026: the Met scanned 3.1m faces with live facial recognition in a year, 13 forces use LFR, and North Ayrshire tops council camera density.
Read more →
ICO complaints statistics for 2026 — 42,315 UK data protection complaints in 2024/25 (up 6.5%), 70% missing the 90-day target and open cases up 72% to 15,810.
Read more →
UK subject access request statistics for 2026 — right of access was 41.9% of ICO complaints in 2024/25, while the average DSAR costs £4,884 and 66 hours to fulfil.
Read more →
UK ransomware statistics for 2026 — a record 204 nationally significant NCSC incidents, only 17% of victims now pay, and the M&S/Co-op attack cost up to £440m.
Read more →
Cyber security skills gap statistics for 2026 — a 143,000-strong UK workforce, a 3,800-a-year shortfall and 49% of businesses missing basic cyber skills.
Read more →
UK AI and data privacy statistics for 2026 — 76% of adults are concerned about automated decisions, and only 17% of AI-using businesses have any AI policy.
Read more →
Phishing hit 38% of UK businesses in 2025/26, the NCSC logged 10.9 million scam reports in a year and £1.28bn was lost to payment fraud. The full UK statistics.
Read more →
UK data breach statistics for 2026 — around 3,600 incidents reported to the ICO in Q4 2025 (up 16%), 43% of businesses attacked and an average breach cost of £3.29m.
Read more →
UK GDPR fine statistics — six ICO fines totalling over £20m in 2025, topped by Capita's £14m. The biggest fines, fines by year, PECR enforcement and EU comparisons.
Read more →
77% of breaches reported to the ICO in Q4 2025 were non-cyber, with wrong-recipient email the most common type. What the ICO data shows about human error in 2026.
Read more →
A clear guide to the seven principles of UK GDPR — lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confid…
Read more →
A practical guide to the difference between data controllers and data processors under UK GDPR, including joint controllers, Article 28 contracts, sub-p…
Read more →
A practical guide to UK GDPR and CCTV — when the rules apply, what businesses must do, when the household exemption protects homeowners, and what the Fa…
Read more →
A current guide to UK cookie consent law — the relationship between PECR and UK GDPR, which cookies still need consent, the new exemption categories fro…
Read more →
A practical guide to UK GDPR data breach response — what counts as a breach, the 72-hour reporting rule, when to notify the ICO and affected individuals…
Read more →
UK GDPR does not set fixed retention periods. This guide explains how the storage limitation principle works in practice, what other UK laws require, an…
Read more →
A current guide to UK GDPR fines and penalties — the two-tier structure, how the ICO calculates fines, the biggest UK penalties to date, and the wider e…
Read more →
A practical guide to the seven lawful bases under UK GDPR, the conditions for valid consent, the new recognised legitimate interests basis introduced by…
Read more →
A practical guide to privacy notices under UK GDPR — what Articles 13 and 14 require, the difference between Article 13 and Article 14 information, laye…
Read more →
A practical guide to Article 30 of the UK GDPR: what a Record of Processing Activities is, who must keep one, what it must contain, and how to build a R…
Read more →
A practical guide to the eight individual rights under UK GDPR — the right to be informed, the right of access, rectification, erasure, restriction, por…
Read more →
A current comparison of the UK and EU versions of GDPR, including the divergence created by the Data (Use and Access) Act 2025 and what it means for UK…
Read more →
A plain-English guide to UK GDPR: what it is, who it applies to, the principles and rights it protects, and what changed under the 2025 Data (Use and Ac…
Read more →
A clear guide to personal data under UK GDPR — what counts, what doesn't, the special category data list, and the difference between pseudonymised and a…
Read more →
The General Data Protection Regulation was adopted on 14 April 2016 and became enforceable on 25 May 2018. This guide explains each date — including UK…
Read more →
A clear guide to who must comply with UK GDPR — including UK and overseas organisations, charities, sole traders, the household exemption, and how the I…
Read more →Our GDPR & Data Protection Course gives you an instant printable certificate the moment you pass — from just £14.