The UK GDPR
Interactive Guide
The UK General Data Protection Regulation protects how your personal data is collected, stored, and shared. For neurodivergent people, this matters more than most realise - diagnosis information, health records, and support needs are all special category data with extra legal protection. Click any card to explore what each part means in practice.
1. Core principles
The UK GDPR is built on seven principles that apply to all personal data processing. Organisations must follow these whenever they handle your information - including your diagnosis, support plans, or health records.
2. Special category data
Some personal data gets extra protection because misuse could cause serious harm or discrimination. Health data - including neurodiversity diagnoses - falls into this category. Organisations need both a lawful basis and a specific condition before they can process it.
3. Your individual rights
The UK GDPR gives you eight rights over your personal data. These apply to everyone, and organisations must make reasonable adjustments so neurodivergent people can exercise them effectively.
4. Neurodiversity-specific issues
Certain data protection issues arise more often for neurodivergent people - from schools sharing diagnosis information without consent to automated decision-making in recruitment. This section covers the areas where GDPR intersects most directly with neurodivergent lives.
Put this into practice
Understanding data protection law is one thing - knowing how to challenge a breach or support someone to exercise their rights is another. Our training helps teams apply GDPR confidently in health, education, and social care settings.