Compléter Analytics TA4 UK Digital Law: Data, Privacy, and SecurityVersion en ligne Fill in the blanks on key UK digital laws. par Muhammad Asif 1 The Guardian of Data : The ) sits at the heart of UK data law . An independent body , it promotes and enforces . Its role is two - fold : proactive and reactive . Proactively , the ICO requires almost all to , establishing responsibility and accountability . Reactively , it acts as arbiter , investigating complaints about the misuse of personal information . It can issue substantial to ensure compliance . 2 Pillars of Protection : DPA 2018 and UK GDPR . The is the UK's domestic implementation of the pan - European ) . These laws share the purpose of keeping secure and apply to any entity that stores data about living individuals . Compliance is grounded in core principles guiding the : , use data for a that is necessary and to , and maintain . Data must be protected from theft , loss , or , with penalties up to or . 3 The [ ] is the UK ? s primary cybersecurity legislation , targeting how systems are accessed rather than what is done with data . It criminalises any [ ] action that results in the [ ] , or the [ ] , or the cause of serious damage . To prevent criminal intent , it also makes illegal the manufacture , supply , or use hardware or software with the specific intention of committing these acts . The maximum penalty for serious breaches is [ ] .