The Government takes the protection of individuals’ personal data online as well as offline, seriously. The Information Commissioner is the UK's independent authority responsible for administering and enforcing information rights and provides guidance and advice to individuals and organisations on, among other things, the protection of personal data online. The Information Commissioner’s Office has a number of tools at its disposal to take action against those that breach the legislation. These powers include the ability to conduct audits, serve enforcement notices and impose civil monetary penalties of up to £500,000.
The Government recently announced it would be implementing the forthcoming General Data Protection Regulation (GDPR) by May 2018. Amongst other protections offered, the GDPR provides individuals with increased control over how their personal data is collected and used online.