Data protection policy

A standard policy for use by a business setting out the principles and legal conditions that must be satisfied in relation to obtaining, handling, processing, transportation and storage of business-external personal data in the course of the operation and administration of the business, including customer, supplier and employee data.

Integrated drafting notes. This document has integrated drafting notes embedded within the text. Click on a heading to read the note. See the Actions box on the right for additional viewing options.

Note: UK data protection law will change on 25 May 2018, when the EU General Data Protection Regulation takes effect, replacing the Data Protection Act 1998. See EU General Data Protection Regulation toolkit for information on the new Regulation and Practical Law's updating policy.

Practical Law Data Protection

Request a free trial

To access this resource and thousands more, register for a free, no-obligation trial of Practical Law. Register using the button below, telephone +44 (0)20 7202 1220 or e-mail

A free trial will give you:

Unlimited access to Practical Law online know-how
Thousands of market standard documents and clauses
Daily alerts and weekly update e-mails on key legal developments in your practice area


Log in

To access this resource, log in below or register for free access.

Contact us

Our customer services team are available every working day 8.30am to 7pm (GMT).

{ "siteName" : "PLC", "objType" : "PLC_Doc_C", "objID" : "1247243009122", "objName" : "ACT_OWNED - READ_ONLY - 9-379-8623", "userID" : "2", "objUrl" : "", "pageType" : "Resource", "academicUserID" : "", "contentAccessed" : "false", "analyticsPermCookie" : "2-605a14e:15b1b901c90:b8c", "analyticsSessionCookie" : "2-605a14e:15b1b901c90:b8d", "statisticSensorPath" : "" }