United Kingdom
7 apps we list are based here
The laws that apply to a company based in United Kingdom. Facts only, each with its source.
The laws, in short
Main privacy law
The UK GDPR and the Data Protection Act 2018 set the UK's data protection rules.
Tech name: UK GDPR and Data Protection Act 2018 · What's that? · Data Protection Act 2018, section 1 (legislation.gov.uk)
Who enforces it
The Information Commission enforces UK data protection law. It replaced the Information Commissioner in 2026.
Tech name: Information Commission (DPA 2018 s.114A; Data (Use and Access) Act 2025 s.118; formerly ICO) · Data Protection Act 2018, Part 5 (legislation.gov.uk)
Do EU privacy rules cover it?Yes
The European Commission has found UK data protection adequate, renewed in December 2025.
Tech name: EU adequacy decisions (GDPR and LED) · What's that? · European Commission: Adequacy decisions
Laws that let the government ask for data
The Investigatory Powers Act 2016 lets the government order telecom and online companies to provide data and keep the ability to assist.
Tech name: Investigatory Powers Act 2016 (incl. s.253 technical capability notices) · Investigatory Powers Act 2016 (legislation.gov.uk)
Must companies keep connection data?Partly
The government can order a telecom company, by a judge-approved notice, to keep users' connection data. Only companies given a notice must do so.
Tech name: Investigatory Powers Act 2016, s.87 retention notices · What's that? · Investigatory Powers Act 2016, section 87 (legislation.gov.uk)
Published intelligence-sharing agreements
The UK and US signed the UKUSA intelligence-sharing agreement in 1946. Canada, Australia and New Zealand joined later ('Five Eyes').
Tech name: UKUSA Agreement (Five Eyes) · GCHQ: Brief history of UKUSA
Last checked Nov 4, 2026. Laws change, so every fact is true as of the date we checked it, and we check again. How we check