General Data Protection Regulation
CONTACT THE CLERKS
The General Data Protection Regulation
The GDPR was adopted on 14th April 2016 and became enforceable in May 2018 by the EU, with the purpose of strengthening and unifying data protection for EU individuals, as well as dealing with the exporting of personal data outside the EU.
The Data Protection Bill
Following the announcement of Brexit, the Data Protection Bill was published on 17th September 2017. This has to be read side by side with the GDPR. The Bill implements the Directive, but also deals with immigration, national security, and the Information Commissioner’s Office (ICO).
The Right to be Informed
The GDPR sparks a big change to UK data protection laws, introducing a number of rights, including the right to: be informed, access, rectifiy, erase (the ‘right to be forgotten’) and the right to data portability.
There are new definitions of consent, legitimate interests and processing criminal information data. A new regime of compliance and accountability has been introduced, with massive fines and governance around Data Protection Officers, data breaches and international transfers.
In line with new GDPR laws, organisations are required to comply with all new GDPR. It is therefore crucial that organisations adapt to, and maintain, these new laws.
