Compliance guidance
UK Security Requirements for Small Business
Quick answer
UK obligations may come from UK GDPR, the Data Protection Act, sector rules, contracts, and payment providers. Applicability depends on your activities, data, and customers.
Who this is for: UK businesses and organisations serving people in the UK.
What to do
- 01Identify personal and sensitive data processing.
- 02Review access control, retention, incident response, and supplier arrangements.
- 03Check whether sector-specific or contractual requirements apply.
- 04Use ICO guidance and qualified advice for your circumstances.
What this does not cover
This overview does not determine your legal obligations or replace advice from the ICO or a qualified professional.
This page is educational information, not legal advice or a professional security audit. Check the official requirements and get qualified help when your circumstances require it.
See how this applies to your businessContinue exploring