This factsheet explores the key elements of data protection in the UK, the role of the data controller (often assigned to HR), the seven core data protection principles, the key terms and actions for data compliance, plus penalties and risk. It is designed to support people professionals (there is also a guide for managers) to assist in supporting data protection compliance within their organisations.

The legal obligation of data protection is from the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 2018). Some updating has, and will, take place through the changes brought in by the Data (Use and Access) Act 2025. The detail of these pieces of legislation is covered on the law page.

Member tool: CIPD Buddy AI AI
Use AI to find trusted answers on our Knowledge hub. Start using CIPD Buddy AI

On this page

To continue reading, log in or become a member

Affiliate membership offers instant access to CIPD resources without the need for assessments or study, or explore your options to become a professional member of the CIPD to demonstrate your commitment to the world of work.

  • Access to exclusive, up-to-date resources
  • Become part of a community to learn, debate and connect with other people professionals
  • Free access to a series of CIPD learning courses and a discount on the rest of our catalogue
Instant access Explore membership
  • Factsheet

    Retention of HR records

    Introduces the legal issues in the UK around effective retention and organisation of HR records

    For Members
  • Descriptive image showing a colourful bar chart to illustrate the concept of data
    Data

    Data Hub

    Explore the latest people profession data and how your organisation compares

    Access the data hub
    For Members
  • Factsheet

    The psychological contract

    This factsheet examines what the psychological contract is, why it's important and the strategic implications it has on the employment relationship

    For Members
  • Factsheet

    Employment status

    Understand how being defined in UK law as an employee, a worker or self-employed affects employment rights and employers’ different legal responsibilities towards them

    For Members
  • Factsheet

    Strategic reward and total reward

    Outlines the main characteristics of strategic and total reward, and looks at designing and implementing a reward strategy across the organisation

    For Members
    • Factsheets