Data Protection Requirements

We have produced guidance documents for members on data protection legislation in the UK. The guides include information on the steps companies need to take to ensure they comply with the regulations, including signposting further regulatory advice.

The latest Data (Use and Access) Act came into effect in June 2025. This introduced new requirements as well as making amendments to existing data protection legislation.

BTHA Data (Use and Access) Act 2025 Factsheet

Last updated: October 7, 2025


BTHA GDPR Guidance

Last updated: January 3, 2024


Guidance on GDPR and the use of child images

Last updated: January 3, 2024

ICO Children’s Code

The Information Commissioner’s Office (ICO) Children’s code (Age-appropriate design code) contains 15 standards that online services need to follow. This is intended to help organisations comply with their obligations for children’s data online under data protection law.

The ICO has published a series of  guidance and resources to help a range of organisations and practitioners to apply the Children’s Code.