UK GDPR · ICO · DPA 2018

UK GDPR
Compliant E-Signatures

Data processing agreements, GDPR consent forms, privacy policy acknowledgements, and DPA breach notification authorisations — all signed digitally under UK GDPR.

Free plan available · No credit card required · ESIGN Act compliant

UK GDPR
Article 28 DPA
ICO
Guidance aligned
SOC 2
Type II certified
DPA 2018
Compliant
Key Features

Everything You Need

Built-in features that save time and close deals faster.

UK GDPR DPA

Article 28 Data Processing Agreements

UK GDPR Article 28 requires a signed data processing agreement between data controllers and processors. Zignature provides UK GDPR Article 28 compliant DPA templates — signed digitally with audit trail.

  • Controller-processor DPA — UK GDPR Article 28 compliant data processing agreement.
  • Sub-processor clauses — Sub-processor approval and notification provisions.
  • International transfer — UK-EU and UK-US data transfer clauses post-Brexit.

Article 28 Data Processing Agreements

UK GDPR Article 28 DPA templates — controller-processor agreements under UK law.

Included on all plans
UK GDPR Documents

UK GDPR Document Templates

Privacy notice acknowledgements, consent capture forms, data subject request acknowledgements, breach notification consents, and employee data processing consent forms — all UK GDPR compliant.

  • Privacy notice ACK — Customer/employee acknowledgement of privacy notice.
  • Marketing consent — PECR-compliant marketing consent capture.
  • Employee consent — Employee consent for specific processing activities.

UK GDPR Document Templates

Privacy notice, consent, DSR acknowledgement, and breach notification templates.

Included on all plans
UK DPA 2018

Aligned with UK DPA 2018 and ICO Guidance

Zignature's UK GDPR templates are aligned with the Data Protection Act 2018 and ICO guidance — providing the documentation required for ICO accountability compliance.

  • Accountability records — Signed DPAs support UK GDPR Article 5(2) accountability.
  • ICO guidance — Templates aligned with ICO controller-processor guidance.
  • Audit evidence — Signed documents support ICO investigation responses.

Aligned with UK DPA 2018 and ICO Guidance

DPA 2018 and ICO accountability framework aligned document templates.

Included on all plans
Use Cases

Works for Every Scenario

From simple agreements to complex multi-party workflows.

How It Works

Up and Running in Minutes

No training required. Send your first document today.

1

Create UK GDPR document

Article 28 DPA, consent form, or privacy notice acknowledgement template.

2

Send to processor or data subject

Processor or employee receives signing link.

3

Signed under UK law

Document executed digitally — legally binding under DPA 2018.

4

GDPR accountability maintained

Signed DPAs and consents archived for ICO accountability.

Start Signing in United Kingdom Today

Free trial — no credit card required.

Frequently Asked Questions

Everything you need to know.

Is UK GDPR the same as EU GDPR after Brexit?

UK GDPR is largely identical to EU GDPR, but is a separate UK law — the EU GDPR as retained and amended under the European Union (Withdrawal) Act 2018, alongside the Data Protection Act 2018. Key differences relate to international data transfers and the ICO's role as UK supervisory authority.

Does a UK business processing EU citizens' data need to comply with EU GDPR as well?

Yes. UK businesses targeting or monitoring EU residents are subject to EU GDPR as well as UK GDPR. They may also need an EU representative. Zignature can support both UK and EU GDPR DPA requirements.

What must a UK GDPR Article 28 DPA include?

A UK GDPR Article 28 DPA must include: subject matter and duration, nature and purpose of processing, type of personal data and categories of data subjects, processor obligations (process only on instructions, confidentiality, security, sub-processors, data subject rights, deletion/return, audit), and processor rights.

Can UK GDPR consent be collected electronically?

Yes. Electronic consent is specifically recognised under UK GDPR. Zignature's consent forms capture the consent text, the consenting individual's identity, and the exact date and time of consent — satisfying UK GDPR demonstrable consent requirements.

Does Zignature have its own UK GDPR DPA available?

Yes. As a data processor, Zignature makes its Article 28 DPA available for customers to sign. This documents the processing Zignature performs on behalf of your business when processing personal data.

Is Zignature registered with the ICO?

Zignature is registered with the ICO as a data processor for UK operations. ICO registration details are available on request.