Procurement Policy Note – 03/22 – Updated Guidance on Data Protection Legislation

  1. Home
  2. /
  3. Library
  4. /
  5. Procurement Policy Note – 03/22 – Updated Guidance on Data Protection Legislation

This Procurement Policy Note (PPN) updates and replaces PPN 02/18. It contains streamlined guidance, and updated legal clauses to take into account our exit from the EU. New contracts should use the updated clauses at Annex A to this PPN.

UK General Data Protection Regulation (UK GDPR) is similar to EU GDPR, but it has been amended to remove references to European organisations and laws. UK GDPR applies to ‘Controllers’ and ‘Processors’ – a Controller is the organisation in control of the processing of personal data.