This note considers key aspects of the UK GDPR (that is the retained EU law version of the General Data Protection Regulation ((EU) 2016/679)) and the Data Protection Act 2018 (DPA 2018) that are relevant to public authorities, including the legal basis for processing, the requirement to appoint a data protection officer, accountability and big data. It also considers the relevant exemptions to listed provisions of the UK GDPR under the DPA 2018.