Statements (35)
| Predicate | Object | 
|---|---|
| gptkbp:instanceOf | gptkb:privacy_law | 
| gptkbp:accessibleBy | right to access right to data portability right to erasure right to object right to rectification right to restrict processing rights related to automated decision making | 
| gptkbp:appliesTo | controllers processors organisations outside UK processing UK residents' data | 
| gptkbp:basedOn | EU GDPR | 
| gptkbp:derivedFrom | EU GDPR as retained in UK law after Brexit | 
| gptkbp:enforcedBy | gptkb:Information_Commissioner's_Office | 
| gptkbp:fullName | United Kingdom General Data Protection Regulation | 
| gptkbp:hasSupplement | gptkb:Data_Protection_Act_2018 | 
| gptkbp:jurisdiction | gptkb:United_Kingdom | 
| gptkbp:legalBasis | consent contractual necessity legal obligation legitimate interests public task vital interests | 
| gptkbp:penalty | fines up to £17.5 million or 4% of annual global turnover | 
| gptkbp:purpose | protect personal data | 
| gptkbp:regulates | processing of personal data | 
| gptkbp:replacedBy | gptkb:Data_Protection_Act_1998 | 
| gptkbp:requires | data breach notification data protection impact assessment appointment of Data Protection Officer (in some cases) | 
| gptkbp:startDate | 2021-01-01 | 
| gptkbp:transferRestrictions | personal data transfers outside UK | 
| gptkbp:bfsParent | gptkb:General_Data_Protection_Regulation_(GDPR) | 
| gptkbp:bfsLayer | 7 | 
| https://www.w3.org/2000/01/rdf-schema#label | UK GDPR |