United Kingdom
UK GDPR compliance, made simple
The UK's own version of the GDPR, retained in UK law alongside the Data Protection Act 2018 after Brexit, governing how organisations handle the personal data of people in the UK.
ComplianceDesk gives you 12 pre-built UK GDPR controls, an evidence vault, audit-ready reports, and reminders before anything falls overdue — so proving UK GDPR compliance stops being a spreadsheet exercise.
Every UK GDPR control, organised for you
The real control library ComplianceDesk seeds the moment you activate UK GDPR — 12 controls across 5 categories.
Core Principles & Governance
- UKGDPR-1.1 Lawful basis identified, including assessment of recognised legitimate interests
- UKGDPR-1.2 Data protection by design and default implemented
- UKGDPR-1.3 Senior responsible individual or DPO designated where required
Data Subject Rights
- UKGDPR-2.1 Data subject access requests responded to within one month
- UKGDPR-2.2 Automated decision-making safeguards implemented under the Section 80 regime
- UKGDPR-2.3 Erasure and rectification requests actioned
Breach Notification
- UKGDPR-3.1 Personal data breaches notified to the ICO within 72 hours
- UKGDPR-3.2 High-risk breaches communicated to affected individuals without undue delay
Complaints Handling
- UKGDPR-4.1 Data subject complaints acknowledged within 30 days
International Transfers & Cookies
- UKGDPR-5.1 International transfer mechanism assessed for each destination
- UKGDPR-5.2 Cookie consent obtained where required under PECR, correctly scoped against the DUAA carve-outs
- UKGDPR-5.3 ICO enforcement exposure understood and current
Frequently asked questions
How many controls does ComplianceDesk track for UK GDPR?
12, organised into 5 categories, ready to assign to an owner as soon as you activate the framework.
Can I track UK GDPR alongside other frameworks?
Yes — most teams activate several frameworks at once. Controls that overlap across frameworks can share the same evidence, so you don't collect the same document twice.
How long does it take to set up UK GDPR in ComplianceDesk?
Activating UK GDPR instantly seeds its full control library. Most teams assign owners and get their first controls moving within a day.
See your full compliance picture
131 frameworks, one system of record.