Privacy — United Kingdom

There is no general right to privacy — but the courts built one, case by case, out of breach of confidence.

Location map — United Kingdom — Privacy
United Kingdom. Simplified location map — Natural Earth data, public domain.

The legal framework

English law never recognised a free-standing privacy tort. Instead the courts developed the tort of misuse of private information, anchored in Article 8 of the European Convention as incorporated by the Human Rights Act 1998. Alongside it, the UK GDPR and the Data Protection Act 2018 govern personal data and are enforced by the Information Commissioner's Office.

Key points

Main claimMisuse of private information: a reasonable expectation of privacy, then a balance against free expression
StatuteUK GDPR and Data Protection Act 2018
RegulatorInformation Commissioner's Office, free to complain to
HarassmentProtection from Harassment Act 1997, civil and criminal
InjunctionsAvailable, including before publication
LimitationOne year for defamation; longer for privacy claims, but act quickly
Interim injunctionsAvailable before publication, with the court weighing Article 8 against Article 10
Anonymity ordersCan prevent the parties being identified in reports of the case
Vicarious liabilityEmployers can be liable for misuse of data by employees, though the courts have narrowed this

In practice

Where to go

Worth knowing

Privacy litigation in England is expensive and costs usually follow the event: a losing claimant can be ordered to pay the other side's legal bill. Test the regulator route first. Costs in privacy litigation frequently exceed the damages awarded. Weigh the regulator route and a platform complaint before issuing proceedings.

Official sources and links

← All countries The general article on this topic →

Page checked in September 2026. The instruments cited can change: if in doubt, confirm with the official source given.

Locate this page in the site map

A question, a correction, a suggestion? Write to us.