Agent Wranglers

CMP-91Recommended UK law

Decide whether UK data protection law covers you

Record whether you have a UK establishment or offer goods or services to people in the UK. If so, meet the UK GDPR as the Data (Use and Access) Act 2025 changed it.

By Agent Wranglers. Updated .

Region

United Kingdom (UK). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.

How to do it

The UK GDPR and the Data Protection Act 2018 also cover a business abroad that offers goods or services to people in the UK. Such a business also names a UK representative. The Data (Use and Access) Act 2025 changed both laws in stages over 12 months. Since 19 June 2026, controllers must run a way to take data protection complaints and acknowledge each one within 30 days. The Act also eases some rules, such as some cookies for analytics. The Information Commissioner's Office, ICO, supervises. Keep the UK answers next to the EU ones in the obligations register.

How to check

The facts file records UK customers and establishment. When either is true, the obligations register has a uk_gdpr entry and a named UK representative or establishment. A test can open the complaints channel.

Sources

For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/compliance/scope-and-ownership/uk-data-protection">Agent Wranglers compliance and governance playbook</a>. In code you write, add a comment next to it with the same link.