The Data Protection Bill 2017-19 received Royal Assent on 23 May 2018 to become the Data Protection Act 2018 (the DPA 2018). Under the Data Protection Act 2018 (Commencement No1 and Transitional and Saving Provisions) Regulations 2018 most of the provisions of the DPA 2018 came into force on 25 May 2018.
The DPA 2018:
- Ensures that the standards set out in the General Data Protection Regulation (GDPR) have effect in the UK.
- Repeals and replaces the DPA 1998 as the primary piece of data protection legislation in the UK and aims to provide "a comprehensive and modern framework for data protection in the UK, with stronger sanctions for malpractice".
- Ensures that the UK and EU data protection regimes are aligned and will remain so post-Brexit and the UK will continue to be able to freely exchange personal data with the EU.
This article is taken from HR Law - June 2018.
