The Data Protection Act 2018 (“DPA 2018”) received Royal Assent on 23 May 2018 and is now an Act of Parliament.
The majority of the DPA 2018 provisions came into force on 25 May 2018 with the remaining provisions to come into force on 23 July 2018.
The DPA 2018 incorporates the General Data Protection Regulations (“GDPR”) into domestic law. The GDPR and the DPA 2018 are to be read side by side.
The DPA 2018 achieves the following:
- Makes our data protection laws fit for the digital age when an ever increasing amount of data is being processed.
- Empowers people to take control of their data.
- Ensures that the UK is prepared for the future after we have left the EU.
- GDPR allows member states to make certain derogations and these are contained with the DPA 2018.