Data Protection Act 2002

All Data Protection Act guidance and forms issued by the Information Commissioner are searchable within this area. 

Please note that the contents are intended for guidance purposes only and do not constitute legal advice.


The guidance in this document library is gradually being replaced by new guidance issued in respect of compliance with the new data protection law.

Document Name File Type Size
Cloud Computing PDF 229.5KB
Defining what constitutes Consent PDF 236.1KB
Direct Marketing - technical guidance PDF 394.3KB
Durant Case - personal data & relevant filing systems PDF 258.5KB
Electoral Registers PDF 209.5KB
Employee Data - recruitment, records and monitoring PDF 259.7KB
New EU standard contractual clauses introduced - press release PDF 15.7KB
Outsourcing the processing of personal data PDF 199.2KB
Regulatory Action by the Information Commissioner PDF 90.1KB
Right of access - Health Records and Reports PDF 223KB
Subject Access Requests for complaint files PDF 223.6KB
Subject access requests for employment references PDF 219.9KB
Subject access requests - exemptions from the right of access PDF 232.5KB
Subject Access Requests and Third Party Information PDF 264.7KB
“Unstructured personal data” held by a public authority PDF 270.3KB