Annex
United Kingdom Privacy Regulatory Requirements
This annex defines privacy and AI regulatory requirements applicable to the processing of personal data in the United Kingdom under UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025 (DUAA 2025; c. 18). It supplements the Privacy and Data Governance Policy and the Privacy Impact and Cross-Border Transfer Procedure.
- Type
- Annex
- Version
- 1.1.19
- Date
- 2026-10-20
- Owner
- Data Protection Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Privacy
- Review frequency
- Annual and upon material privacy, regulatory, or AI governance change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Applicable laws and regulatory authorities
- AI and privacy obligations
- Employment and workforce monitoring
- Cross-border transfer mechanisms
- Enforcement and fines
- Limitations
Related documents
- European Union Privacy Regulatory Requirementsprivacy
- Privacy Jurisdiction Indexprivacy
- Privacy and Data Governance Policyprivacy
- Privacy Impact and Cross-Border Transfer Procedureprivacy
- Global Regulatory Applicability Registercompliance
Next
All Documents