Jurisdiction-specific data protection, defamation law, and removal process information for United Kingdom. Last reviewed 2025.
Information Commissioner's Office (ICO) is the supervisory authority for data protection in United Kingdom. Individuals can file erasure and data-related complaints directly with this authority.
UK GDPR (retained post-Brexit) and the Data Protection Act 2018
The UK GDPR preserves Article 17 erasure rights. The ICO handles complaints and can compel organisations to delete data. Since Brexit, the UK operates its own adequacy framework, accepted by the EU in 2021.
The Defamation Act 2013 requires claimants to show serious harm to reputation. Online defamation is handled under this framework, with operators using the "operator defence" for user-generated content if they act expeditiously upon notice.
The ICO provides a direct online complaints portal. UK courts can grant injunctions and Norwich Pharmacal orders to identify anonymous authors. Google's UK delisting process follows the EU RTBF framework, now mirrored under UK law.
Common UK sources requiring removal include The Sun, Daily Mail, Mirror Online, The Guardian, The Telegraph, Sky News, BBC Online, and review platforms such as Trustpilot and Glassdoor.
The UK's "serious harm" threshold under the Defamation Act 2013 means not all negative content is actionable defamation. However, UK GDPR data erasure requests provide a separate, often quicker route for removing personal information from UK-based data controllers.
If you need similar services in another country, explore our location-specific pages: