Due 28 OctAUQuarterly BAS Due (July–September) NewUSForm 1099-NEC & Contractor Payment Reporting Check See deadlines ›
Due 31 OctPaper Self Assessment Return Deadline NewSole Trader Allowable Expenses & Simplified Expenses Check See deadlines ›
Due 2 NovForm 941 Quarterly Payroll Tax Return Due (Q3) NewForm 1099-NEC & Contractor Payment Reporting Check See deadlines ›
Due 31 OctEU One Stop Shop (OSS) VAT Return — July to September NewEU Product Liability Directive Readiness Check See deadlines ›
Due 28 OctQuarterly BAS Due (July–September) NewAutomated Decision-Making Privacy Check (Australia) See deadlines ›

Data & Privacy United Kingdom

Privacy Policy Compliance Check

Check whether your privacy policy covers everything UK GDPR requires.

Start free check 10 questions · 6 minutes · No signup

Did you know? The numbers behind this check.

  • UK GDPR Articles 13 & 14Required by
  • Outdated third-party tool listCommon gap
  • Plain, clear languageShould be written in
  • At least annuallyReview frequency recommended

Why this matters.

A privacy policy isn’t just a legal formality — it’s the document UK GDPR requires you to provide so people understand what data you collect, why, how long you keep it, and what rights they have. Articles 13 and 14 of UK GDPR set out specific information that must be included, and the ICO has published guidance on what “fair processing information” looks like in practice. Many small business privacy policies are copied from templates years ago and don’t reflect what the business actually does with data today.

An outdated or generic privacy policy is one of the most common issues the ICO flags when it investigates a complaint, because it’s often the first thing checked. If your policy doesn’t match your actual practices — for example, it doesn’t mention a tool you now use to process payments or run email marketing — that mismatch itself can be treated as a transparency failure, separate from any issue with the underlying processing.

Have these to hand.

  • Your current privacy policy (if you have one)
  • A list of what personal data you collect and why
  • A list of any third-party services that process personal data on your behalf
  • Your data retention practices

What you’ll get.

  • 1A score out of 100Where you stand today, at a glance.
  • 2Findings ranked by riskWhat could cost you, highest risk first.
  • 3A plan with timeframesWhat to fix first and by when.

This check reviews your privacy policy content against UK GDPR’s transparency requirements and highlights any gaps or outdated sections.

More in Data & Privacy. Checks people run next.

General guidance only, not legal advice. Consult a qualified solicitor or adviser in your jurisdiction for specific issues.