{"id":1187,"date":"2026-04-14T17:47:45","date_gmt":"2026-04-14T14:47:45","guid":{"rendered":"https:\/\/www.talentlms.com\/talentcards\/?page_id=1187"},"modified":"2026-06-03T16:57:30","modified_gmt":"2026-06-03T13:57:30","slug":"gdpruk","status":"publish","type":"page","link":"https:\/\/www.talentlms.com\/talentcards\/gdpruk","title":{"rendered":"UK GDPR"},"content":{"rendered":"
\n
\n\t\n\n
\n
\n
\n

TalentCards<\/p>\n<\/div>\n\n\n\n

UK GDPR<\/h1>\n<\/div>\n<\/div>\n\n<\/section>\n<\/div>\n\n\n\n
\n
\n

Free flow of data from the EU to the UK<\/h2>\n\n\n\n

The European Commission has decided that the United Kingdom ensures an adequate level of protection for personal data transferred to the UK under the General Data Protection Regulation (GDPR) (for details, see Adequacy Decision of 28.6.2021<\/a>). In this way, personal data can now flow freely from the European Union to the United Kingdom, where it benefits from an essentially equivalent level of protection to that guaranteed under EU law. In other words, the data protection rules in the UK in many aspects closely mirror the corresponding rules applicable within the EU. The Adequacy Decisions shall expire four years after their entry into force and will have to be renewed.<\/p>\n<\/div>\n\n\n\n

\n

Data protection in the UK<\/h2>\n\n\n\n

Currently, the legal framework on the protection of personal data in the UK consists of: \u2022 The UK GDPR \u2022 The DPA 2018 (\u201cData Protection Act 2018\u201d).<\/p>\n\n\n\n

Under UK Law: \u2022 Personal data should be processed lawfully, fairly, and in a transparent way. When the processing is based on consent, a written request for consent must be presented using clear and plain language, the consent must be freely given, and the data subject must have the right to withdraw consent at any time. \u2022 Personal data should be processed for a specific purpose and subsequently used only insofar as this is not incompatible with the purpose of processing. \u2022 Personal data should be accurate and, where necessary, kept up to date. It should also be adequate, relevant, and not excessive in relation to the purposes for which it is processed, and in principle be kept for no longer than is necessary for the purposes for which the personal data is processed. \u2022 Personal data should also be processed in a manner that ensures security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage. \u2022 Under the accountability principle, entities processing data are required to put in place appropriate technical and organizational measures to effectively comply with their data protection obligations and be able to demonstrate such compliance.<\/p>\n\n\n\n

Data subjects enjoy certain rights under UK Law: \u2022 Data subjects should be informed of the main features of the processing of their personal data. \u2022 Data subjects have the right to access their data, to rectify them or have them rectified, and to erase them or have them erased. \u2022 Data subjects have the right to request restriction of processing, the right to data portability, and the right to object. The latter also includes the right of a data subject to object to the processing of personal data for the purpose of direct marketing. \u2022 Data subjects have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning them or similarly significantly affects them.<\/p>\n<\/div>\n\n\n\n

\n

Oversight and enforcement<\/h2>\n\n\n\n

In the United Kingdom, the oversight and enforcement of compliance with the UK GDPR and the DPA 2018 is carried out by the Information Commissioner. The Information Commissioner is a \u201cCorporation Sole\u201d: a separate legal entity constituted in a single person. The Information Commissioner is supported in her work by an office. The independence of the Commissioner is explicitly established under UK Law. You can visit the Information Commissioner\u2019s website here<\/a>.<\/p>\n<\/div>\n\n\n\n

\n

International data transfers<\/h2>\n\n\n\n

The regime on international transfers from the UK is in substance identical to the rules set out in the GDPR. Transfers of personal data to a third country or international organization can only take place on the basis of adequacy regulations, or in the absence of adequacy regulations, where the controller or processor has provided appropriate safeguards.<\/p>\n<\/div>\n\n\n\n

\n

Adequacy Regulations:<\/h2>\n\n\n\n

The Adequacy Regulations are made by the Secretary of State, and they can stipulate that a third country or an international organization ensures an adequate level of protection of personal data. The Secretary of State must consult the Information Commissioner when proposing to adopt UK adequacy regulations. Once adopted by the Secretary of State, those regulations are laid before Parliament and subject to the \u201cnegative resolution\u201d procedure, under which both Houses of Parliament can scrutinize the regulations and have the ability to pass a motion annulling the regulations within a 40-day period.<\/p>\n\n\n\n

Currently, certain transfers of personal data are treated as if they are based on adequacy regulations. These transfers include transfers to an EEA State, the territory of Gibraltar, a European Union institution, body, office, or agency set up by or on the basis of the EU Treaty, and third countries that were the subject of an EU adequacy decision at the end of the transition period.
<\/p>\n<\/div>\n\n\n\n

\n

Appropriate safeguards:<\/h2>\n\n\n\n

In the absence of Adequacy Regulations, international transfers can take place where the controller or processor has provided appropriate safeguards. Appropriate safeguards include, among others, standard data protection clauses. The standard data protection clauses can be adopted by the Secretary of State or the Information Commissioner.<\/p>\n\n\n\n

For more details on international data transfers from the UK, click here<\/a>.<\/p>\n\n\n\n

We comply with the UK GDPR. We have made adjustments to our Data Processing Addendum to reflect our compliance with the UK GDPR. To view our DPA, click\u00a0here<\/a>. Should you have any questions concerning UK GDPR, you may contact privacy@talentcards.com.<\/p>\n<\/div>\n<\/div>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Free flow of data from the EU to the UK The European Commission has decided that the United Kingdom ensures an adequate level of protection for personal data transferred to the UK under the General Data Protection Regulation (GDPR) (for details, see Adequacy Decision of 28.6.2021). In this way, personal data can now flow freely from […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_add_custom_class_to_body":"","_center_logo":false,"_short_description":"","footnotes":""},"class_list":["post-1187","page","type-page","status-publish","hentry"],"yoast_head":"UK GDPR Compliance | TalentCards<\/title>\n<meta name=\"description\" content=\"Learn how TalentCards complies with UK GDPR requirements. Understand how we protect, process, and manage personal data securely.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.talentlms.com\/talentcards\/gdpruk\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"UK GDPR Compliance | TalentCards\" \/>\n<meta property=\"og:description\" content=\"Learn how TalentCards complies with UK GDPR requirements. Understand how we protect, process, and manage personal data securely.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.talentlms.com\/talentcards\/gdpruk\" \/>\n<meta property=\"og:site_name\" content=\"TalentCards\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-03T13:57:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.talentcards.com\/wp-content\/uploads\/2026\/04\/Talentcards-OG.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2400\" \/>\n\t<meta property=\"og:image:height\" content=\"1260\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.talentlms.com\\\/talentcards\\\/gdpruk\",\"url\":\"https:\\\/\\\/www.talentlms.com\\\/talentcards\\\/gdpruk\",\"name\":\"UK GDPR Compliance | TalentCards\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.talentlms.com\\\/talentcards\\\/#website\"},\"datePublished\":\"2026-04-14T14:47:45+00:00\",\"dateModified\":\"2026-06-03T13:57:30+00:00\",\"description\":\"Learn how TalentCards complies with UK GDPR requirements. Understand how we protect, process, and manage personal data securely.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.talentlms.com\\\/talentcards\\\/gdpruk#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.talentlms.com\\\/talentcards\\\/gdpruk\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.talentlms.com\\\/talentcards\\\/gdpruk#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.talentlms.com\\\/talentcards\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"UK GDPR\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.talentlms.com\\\/talentcards\\\/#website\",\"url\":\"https:\\\/\\\/www.talentlms.com\\\/talentcards\\\/\",\"name\":\"TalentCards\",\"description\":\"Mobile Training Platform\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.talentlms.com\\\/talentcards\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>","yoast_head_json":{"title":"UK GDPR Compliance | TalentCards","description":"Learn how TalentCards complies with UK GDPR requirements. Understand how we protect, process, and manage personal data securely.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.talentlms.com\/talentcards\/gdpruk","og_locale":"en_US","og_type":"article","og_title":"UK GDPR Compliance | TalentCards","og_description":"Learn how TalentCards complies with UK GDPR requirements. Understand how we protect, process, and manage personal data securely.","og_url":"https:\/\/www.talentlms.com\/talentcards\/gdpruk","og_site_name":"TalentCards","article_modified_time":"2026-06-03T13:57:30+00:00","og_image":[{"width":2400,"height":1260,"url":"https:\/\/www.talentcards.com\/wp-content\/uploads\/2026\/04\/Talentcards-OG.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.talentlms.com\/talentcards\/gdpruk","url":"https:\/\/www.talentlms.com\/talentcards\/gdpruk","name":"UK GDPR Compliance | TalentCards","isPartOf":{"@id":"https:\/\/www.talentlms.com\/talentcards\/#website"},"datePublished":"2026-04-14T14:47:45+00:00","dateModified":"2026-06-03T13:57:30+00:00","description":"Learn how TalentCards complies with UK GDPR requirements. Understand how we protect, process, and manage personal data securely.","breadcrumb":{"@id":"https:\/\/www.talentlms.com\/talentcards\/gdpruk#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.talentlms.com\/talentcards\/gdpruk"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.talentlms.com\/talentcards\/gdpruk#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.talentlms.com\/talentcards\/"},{"@type":"ListItem","position":2,"name":"UK GDPR"}]},{"@type":"WebSite","@id":"https:\/\/www.talentlms.com\/talentcards\/#website","url":"https:\/\/www.talentlms.com\/talentcards\/","name":"TalentCards","description":"Mobile Training Platform","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.talentlms.com\/talentcards\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.talentlms.com\/talentcards\/wp-json\/wp\/v2\/pages\/1187","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.talentlms.com\/talentcards\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.talentlms.com\/talentcards\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.talentlms.com\/talentcards\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.talentlms.com\/talentcards\/wp-json\/wp\/v2\/comments?post=1187"}],"version-history":[{"count":12,"href":"https:\/\/www.talentlms.com\/talentcards\/wp-json\/wp\/v2\/pages\/1187\/revisions"}],"predecessor-version":[{"id":2395,"href":"https:\/\/www.talentlms.com\/talentcards\/wp-json\/wp\/v2\/pages\/1187\/revisions\/2395"}],"wp:attachment":[{"href":"https:\/\/www.talentlms.com\/talentcards\/wp-json\/wp\/v2\/media?parent=1187"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}