THE GDPR MASTER MANUAL

THE GDPR MASTER MANUAL

Volume 1 · Learner Edition

Risk Cognition: Foundations to Litigation-Ready

Most people meet data protection law at the worst possible moment — when an organisation has their information, will not hand it over, and hides behind words the person does not yet understand. This book is written for that moment.

The GDPR Master Manual takes you from no prior knowledge to the point where you can build a subject access request that works, read what comes back, and identify exactly where an organisation has failed to meet its legal obligations. It does not just tell you what the law says. It trains you to use it.

You will learn the UK GDPR, the Data Protection Act 2018, and how the court rules fit around them — as one connected system, in plain English, current to 2026 and including the changes made by the Data (Use and Access) Act 2025. Each chapter follows the same disciplined method: understand the right, see it worked through real evidence, then apply it yourself.

Inside this volume:

- how the whole law is shaped, and where each rule actually lives
- Article 5 — the six principles and the accountability duty that puts the burden of proof where it belongs
- Article 12 — timing, deadlines and the gatekeeper rules controllers rely on to delay
- Article 15 — the right of access, and how to demand actual recipients and sources, not vague categories
- Articles 16, 18 and 19 — correcting, restricting and the notification chain
- Article 6 — lawful basis, and how to test whether processing was ever lawful
- Articles 17 and 21 — erasure and objection
- a memory-installation method built for real recall under pressure, not just reading
- worked exercises with the answer keys held in the separate Instructor & Marking Edition, so you do the thinking first

Written for litigants in person, McKenzie friends, advisers, students, and anyone who has been told "we've complied fully" and needs to test whether that is true.

This is training material, not legal advice, and it states the law of England and Wales as at its publication date. The law changes — the book teaches you to verify every provision against the primary source before you rely on it. That discipline is part of the method.

Stephen Patrick Ward MSc writes from a background in policing and business, and a Master's degree in network security, in a direct, practical, evidence-led voice. Move from asking to testing, from frustration to sequence, and from complaint to evidence.