This article focuses upon the implementation of data protection as a learning process involving both regulators and those whose information practices are regulated. From this conceptual perspective, and using the British data protection system as an example, it describes the interactions in this process of governance within the context of factors that influence implementation and affect the achievement of policy objectives. It refers to related analytical strategies for understanding governance and learning in this rapidly changing and technologically conditioned field of regulation.