# data[].attributes.body
Guidance and support for small organisations including Childcare and Early Years settings - free, authoritative and accessible information.

# data[].attributes.body
Guidance and expectations regarding data protection, breach reporting and GDPR guidance specific to education and childcare.

# data[].attributes.body
Immediate support if you experience a cyber attack.

Report cyber crime, attempted fraud and phishing.

Alerts regarding current cyber scams

# data[].attributes.body
A UK government backed certification scheme. Achievable and increasingly expected by commissioners and local authorities

# data[].attributes.attachment_link.description
Cyber Essentials helps you to guard your organisation against cyber attack.

# data[].attributes.body
Read through our presentation to take some of the overwhelm out of getting cyber security right and access some helpful hints and tips to make this simpler and a team effort.

# data[].attributes.body
Display this reminder for staff in your setting - simple, doable actions that help to protect everyone

# data[].attributes.body
Cyber Action Toolkit from the National Cyber Security Centre

# data[].attributes.attachment_link.description
The Cyber Action Toolkit gives you clear, bite-sized actions to protect your business’s money and reputation from cyber criminals.

# data[].attributes.body
A visual reminder of what an attack might look like

# data[].attributes.body
As highlighted by the National Cyber Security Centre (NCSC)

# data[].attributes.attachment_link.readable_text
At home, at work, or on the go, Bitwarden easily secures all your passwords, passkeys, and sensitive information.

Decoding tomorrow: Developer secrets, security and the future of passkeys

Everything you need out of a password manager

Powerful security within minutes

For those who want to do more, secure more, and collaborate more, Bitwarden is fast and easy to set up for both individuals and businesses.

Unlimited passwords, unlimited devices

Cross platform access for mobile, browser, and desktop apps. Supported in over 50 languages.

Protect what's important to you

Zero knowledge, end-to-end encryption guides the Bitwarden open source approach to trust, accountability, and security.

Bitwarden helps businesses run quickly and securely

Work more productively and power up your protection

Generate, consolidate, and autofill strong and secure passwords for all your accounts

Bitwarden gives you power to create and manage unique passwords and passkeys, so you can strengthen privacy and boost productivity online from any device or location.

Securely share encrypted information directly with anyone

Bitwarden Send is a feature that allows all users to transmit data directly to others, while maintaining end-to-end encrypted security and limiting exposure.

Gain peace of mind with comprehensive compliance

Protect your online data using a password manager you can trust. Bitwarden conducts regular third-party security audits and is compliant with GDPR, SOC 2, HIPAA, Privacy Shield, and CCPA standards.

Protect more than your passwords

Store all types of sensitive data, transmit it securely to anyone, access vault health reports-and much more.

Protect your company from cyber criminals

Professional hacker, Rachel Tobac, breaks down the strategies to safeguard your company's assets and reputation from cyber criminals in her latest eBook.

# data[].attributes.attachment_link.title
The password manager trusted by millions | Bitwarden

# data[].attributes.attachment_link.description
Bitwarden makes it easy for businesses and individuals to securely generate, store, and share passwords from any location, browser, or device. Create your free Bitwarden account today.

# data[].attributes.body
As highlighted by the NCSC

# data[].attributes.attachment_link.title
Passwords, Secrets, and Access Management | 1Password

# data[].attributes.attachment_link.description
Protect passwords and secrets, manage app access, and secure AI tools with 1Password. Easy to adopt from growing teams to enterprise.

# data[].attributes.body
As Highlighted by the NCSC

# data[].attributes.body
Data Protection Act 2018 (DPA 2018) and UK GDPR
The DPA 2018, alongside the UK GDPR, forms the primary legal framework for personal data protection in the UK. Organisations processing personal data must implement appropriate technical and organisational measures to safeguard information, including customer data, medical records, and personally identifiable information.

# data[].attributes.attachment_link.readable_text
Legislation is available in different versions:

Latest Available (revised): The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the 'Changes to Legislation' area.

Original (As Enacted or Made): The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.

# data[].attributes.attachment_link.description
An Act to make provision for the regulation of the processing of information relating to individuals; to make provision in connection with the Information Commissioner's functions under certain regulations relating to information; to make provision for a direct marketing code of practice; and for connected purposes.

# data[].attributes.body
Data protection legislation controls how your personal information is used by organisations, including businesses and government departments.

In the UK, data protection is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

# data[].attributes.attachment_link.readable_text
Skip to main content

Cookies on GOV.UK

We use some essential cookies to make this website work.

We'd like to set additional cookies to understand how you use GOV.UK, remember your settings and improve government services.

We also use cookies set by other sites to help us deliver content from their services.

You have accepted additional cookies. You can change your cookie settings at any time.

You have rejected additional cookies. You can change your cookie settings at any time.

Accept additional cookies Reject additional cookies View cookies

The Data Protection Act 2018 controls how your personal information is used by organisations, businesses or the government.

The Data Protection Act 2018 is the UK's implementation of the General Data Protection Regulation (GDPR).

Everyone responsible for using personal data has to follow strict rules called 'data protection principles'. They must make sure the information is:

used fairly, lawfully and transparently

used for specified, explicit purposes

used in a way that is adequate, relevant and limited to only what is necessary

accurate and, where necessary, kept up to date

kept for no longer than is necessary

handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage

There is stronger legal protection for more sensitive information, such as:

race

ethnic background

political opinions

religious beliefs

trade union membership

genetics

biometrics (where used for identification)

health

sex life or orientation

There are separate safeguards for personal data relating to criminal convictions and offences.

Your rights

Under the Data Protection Act 2018, you have the right to find out what information the government and other organisations store about you. These include the right to:

be informed about how your data is being used

access personal data

have incorrect data updated

have data erased

stop or restrict the processing of your data

data portability (allowing you to get and reuse your data for different services)

object to how your data is processed in certain circumstances

You also have rights when an organisation is using your personal data for:

automated decision-making processes (without human involvement)

profiling, for example to predict your behaviour or interests

# data[].attributes.attachment_link.description
The Data Protection Act (DPA) controls how personal information can be used and your rights to ask for information about yourself

# data[].attributes.body
The Security of Network & Information Systems Regulations (NIS Regulations) provide legal measures to boost the level of security (both cyber & physical resilience) of network and information systems for the provision of essential services and digital services.

# data[].attributes.attachment_link.authors[].name
Department for Digital, Culture, Media & Sport

# data[].attributes.attachment_link.description
The Security of Network & Information Systems Regulations (NIS Regulations) provide legal measures to boost the level of security (both cyber & physical resilience) of network and information systems for the provision of essential services and digital services.

# data[].attributes.body
The Cyber Security and Resilience (Network and Information Systems) Bill proposes new laws to improve UK cyber defences and protect our essential public services.

# data[].attributes.attachment_link.authors[].name
Department for Science, Innovation and Technology

# data[].attributes.attachment_link.description
The Cyber Security and Resilience (Network and Information Systems) Bill proposes new laws to improve UK cyber defences and protect our essential public services.

# data[].attributes.body
A guide to writing a Critical Incident Management Plan which should include risks regarding Cyber Attacks and Cyber Security

# data[].attributes.body
Advice for sole traders and small organisations to respond to cyber attacks

It is worrying if you are victim of an online scam or cyber attack. Resources and support are available to help you.

These can provide the basis for your critical incident response if a Cyber Incident happens to your setting.

# data[].attributes.attachment_link.title
Advice for sole traders and small organisations to respond to cyber attacks

# data[].attributes.attachment_link.description
It is worrying if you are victim of an online scam or cyber attack. Resources and support are available to help you.

# data[].attributes.body
This service is provided by the National Cyber Security Centre (NCSC). The NCSC is the UK’s independent authority on cyber security, providing cyber incident response to the most critical incidents affecting the UK.

There is a step by step guide to support you to report the right issue to the right place and advise if you need to report a data breach to the ICO.

# data[].attributes.attachment_link.readable_text
Skip to main content

Cookies on GOV.UK

We use some essential cookies to make this website work.

We'd like to set additional cookies to understand how you use GOV.UK, remember your settings and improve government services.

We also use cookies set by other sites to help us deliver content from their services.

Accept additional cookies Reject additional cookies View cookies

Find out where to report a cyber incident in the UK, Isle of Man or Channel Islands.

What is a cyber incident?

Cyber incidents can take many forms, such as denial of service, malware, ransomware or phishing attacks.

Types of activities that are commonly recognised as being a cyber incidents are:

breaches of a system's security policy that affects its integrity or availability

attempts to gain unauthorised access to a system or to data

changes to a system's firmware, software or hardware without the system owner's consent

malicious disruption or denial of service

You can find out more by going to what is a cyber incident?

What you need to know

This service is provided by the National Cyber Security Centre (NCSC). The NCSC is the UK's independent authority on cyber security, providing cyber incident response to the most critical incidents affecting the UK.

Information you give will not be shared with the Information Commissioner's Office (ICO)

You may need to report your incident with the ICO if there has been a breach of personal data. You can find out more by using the ICO's self assessment tool.

# data[].attributes.attachment_link.description
Skip to main content We use some essential cookies to make this website work. We'd like to set additional cookies to understand how you use GOV.UK, remember your settings and improve government services. We also use cookies set by other sites to help us deliver content from their services.

# data[].attributes.body
This is an overview of our newly developed Cyber Security model Policy. Contact your childcare advisor or admin@bandltd.org.uk for the full version.

# data[].attributes.body
A guide from the NCSC regarding response and recovery from a cyber attack for small businesses

# data[].attributes.attachment_link.title
Small Business Guide: Response & Recovery

# data[].attributes.attachment_link.description
Guidance that helps small to medium sized organisations prepare their response to and plan their recovery from a cyber incident.