We are the UK regulator for information rights legislation, including the UK GDPR and the Data Protection Act 2018. We offer advice and guidance to organisations and members of the public across the UK, promoting good practice, monitoring and investigating breach reports, assessing organisations’ compliance and taking enforcement action where appropriate.