Data Privacy & Digital Rights
Submit a UK GDPR data subject access request, demand erasure under Article 17, get intimate images removed under Sexual Offences Act 2003 s. 66B and the Online Safety Act 2023, and stop online harassment.
Covered in this guide:
UK residents have the strongest data-privacy and online-safety statutory framework in the English-speaking world. The UK GDPR + Data Protection Act 2018 give every person rights of access, rectification, erasure, restriction, portability, and objection — exercisable against any controller processing their personal data. The standard controller response time is one month under Article 12(3) UK GDPR. The Information Commissioner's Office (ICO) enforces, free of charge.
For intimate-image abuse, the Online Safety Act 2023 s. 188 inserted four offences into the Sexual Offences Act 2003 as s. 66B — these came into force on 31 January 2024. Sharing intimate images without consent (66B(1)) is a summary-only offence (6 months); with intent to cause distress, for sexual gratification, or as a threat (66B(2)–(4)) carries up to 2 years. Intimate-image abuse is now a priority offence under the Online Safety Act 2023, requiring platforms to proactively prevent it.
For specialist NCII support: the Revenge Porn Helpline (SWGfL, 0345 6000 459, Mon–Fri 10am–4pm) and StopNCII.org (free hash-based proactive removal across participating platforms, 18+).
Key Laws
Data Protection Act 2018 + UK GDPR
DPA 2018 c. 12 + UK GDPR (retained EU law)
Data subject rights of access, rectification, erasure, restriction, portability, objection; 1-month controller response under Article 12(3).
Sexual Offences Act 2003 s. 66B
SOA 2003 ss. 66B–66D (inserted by OSA 2023 s. 188, in force 31 Jan 2024)
Four NCII offences: sharing without consent (6m); intent to cause distress / sexual gratification / threats (up to 2y).
Online Safety Act 2023
OSA 2023 c. 50
Ofcom-regulated platform duties; intimate-image abuse made a priority offence requiring proactive prevention.
Protection from Harassment Act 1997
PHA 1997 c. 40
Criminal and civil routes for course of conduct amounting to harassment; civil restraining orders available.
UK GDPR Data Subject Access Request and Right to Erasure
Under UK GDPR Article 15, you can request from any controller a copy of the personal data it holds about you, plus information about why it's processed, who it's shared with, and how long it's kept. T...
Removing Non-Consensual Intimate Images and Deepfakes in the UK
If you are in immediate danger, call 999. Since 31 January 2024, sharing intimate images without consent has been a criminal offence in England and Wales under Sexual Offences Act 2003 s. 66B, inserte...
Online Harassment, Stalking, and Threatening Communications in the UK
If you are in immediate danger, call 999. The UK has multiple criminal and civil routes against online harassment, plus platform-side Ofcom-regulated duties. The Protection from Harassment Act 1997 cr...