Complying with the UK DPA

The Data Protection Act (DPA) 2018 is the UK's implementation of the GDPR legislation. While largely similar to the GDPR, it extends and adapts the GDPR legislation to fit the UK business and consumer landscape. 

Need to expand your data privacy compliance to include the DPA? The Ketch Data Permissioning Platform is built for responsive compliance across all regulations, whether you use our templates or your custom policies. Get in touch to see how it works:

The UK Data Protection Act (DPA)

The Data Protection Act 2018 is a national law in the UK, replacing the former Data Protection Act 1998. DPA 2018 is complementary to the GDPR legislation in the European Union. At a glance:


The primary purpose of the DPA is to officially bring the GDPR into UK law. It also adapts and extends the GDPR in certain areas for UK consumers. 


An essential component of the DPA (and the GDPR) is ensuring your business has lawful purpose for processing data. The DPA defines six purposes.


The DPA gives new power to the UK ICO (Information Commissioner's Office) to investigate complaints, impose fines, and educate consumers.

“We needed a fast, easy-to-deploy privacy solution and Ketch delivered on that promise. Onboarding was straightforward thanks to their qualified, hands-on customer experience team.”

Tim Janas, Senior Corporate Counsel, SeatGeek