ICAEW.com works better with JavaScript enabled.

ICAEW's guide to GDPR

The General Data Protection Regulation (GDPR) came into force on 25 May 2018. It applies to everyone trading within the EEA (including UK individuals and organisations). This content is not intended to constitute legal advice. Specific legal advice should be sought before taking or refraining from taking any action in relation to the matters outlined.

In this section

FAQs, helpsheets and guidance

GDPR update

Louise Marshall, solicitor and GDPR expert, provides a quick update on GDPR, highlights any pertinent case law and points out pitfalls that businesses need to avoid to ensure GDPR compliance.

GDPR update

Louise Marshall, solicitor and GDPR expert, provides a quick update on GDPR, highlights any pertinent case law and points out pitfalls that businesses need to avoid to ensure GDPR compliance.

The GDPR's transparency obligations are difficult but not impossible

Thursday 11 April 2019, The EU GDPR is one the most significant changes in privacy in the past two decades, and companies need to fully understand its implications according to ICAEW. In its new guide, Data Protection and Transparency, ICAEW explains the transparency principle of the GDPR and gives essential guidance on how to comply with its requirements.

Articles and features

Open Season

Dave Gardner, lead of the financial services practice at law firm TLT, talks to Chris Evans about the challenges and opportunities of open banking and the revised Payment Services Directive.

Webinars and videos

GDPR update

Louise Marshall, solicitor and GDPR expert, provides a quick update on GDPR, highlights any pertinent case law and points out pitfalls that businesses need to avoid to ensure GDPR compliance.

Cybercrime and GDPR in the Manufacturing Sector

Dr Jane Berney, Business Law manager at the ICAEW and Professor Jim Gee, Head of the Forensic and Counter Fraud Services Team discuss cybercrime and GDPR in the manufacturing sector

GDPR and cyber security in the manufacturing sector

New and emerging developments of cyber security in the manufacturing sector. Hear from Dr Jane Berney Business Law Manager, ICAEW and Professor Jim Gee, Head of Forensic, cybercrime and counter fraud services, Crowe Clark Whitehill.

New Funding Regime for the ICO

The government has revised the fee structure which will come into force on 25 May 2018. If you have paid your fee for this year you do not need to do anything but the new fees will apply when you renew. See also ICO guidance on the registration fees for GDPR.

Data Protection Act 2018

The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR) and replaces the Data Protection Act 1998.

What GDPR means for cyber security

Guidance from the National Cyber Security Centre (NCSC) on the introduction of the General Data Protection Regulation (GDPR) and what it means for cyber security.

Article 29 Working Party guidelines

EU level guidance on the General Data Protection Regulation. Produced by the Article 29 Working Party, an independent European advisory body on data protection.