Data protection

It’s increasingly important that we protect our personal data, but what about the data that companies have on us? Our guides explain your data protection rights.

Red user icon placed within a light-colored folder graphic, set against a soft green background.

How do I make a subject access request (SAR)?

You can make a subject access request if you want to access the personal data a company holds about you. This guide explains how to make one and what to include in the request.

Which?

Three simplified human figures on a light green background; the centre figure is red, flanked by two light pink figures.

What counts as personal data?

What counts as personal data may include more than you initially realise – our guide explains your personal data rights under GDPR.

Which?

Blue fingerprint pattern with a red triangular warning sign containing an exclamation mark in the centre.

My personal data has been lost after a breach, what are my rights?

If you become aware that an organisation has lost your personal data, there are steps you can take to protect yourself and in some cases claim compensation following a data breach.

Lauren Deitz

What is identity theft?

If you think your identity has been stolen, you should contact your bank or credit card company and the police as soon as possible to let them know the situation.

Tali Ramsey

An illustration indicating a mobile phone conversation

How to stop nuisance phone calls

Unwanted phone calls can be a real nuisance. Read the Which? guide on what to do if you are plagued with unwanted calls and top tips on how to avoid them in the first place.

Which?

Regulations

UK General Data Protection Regulation (GDPR)

The UK General Data Protection Regulation governs your personal data rights, including the way companies handle your data and the compensation you can claim for misuse of your data.