GDPR compliance checklist for UK small businesses

UK GDPR applies to almost every UK business — anyone processing personal data of customers, suppliers, employees, or prospects. The eight-point compliance baseline: identify lawful bases, publish a privacy notice, register with the ICO, get consent right, respond to subject access requests, manage breaches, train staff, and document everything.