Data Protection Act 2018

Data Protection Act 2018
Act of Parliament
Long title An Act to make provision for the regulation of the processing of information relating to individuals; to make provision in connection with the Information Commissioner’s functions under certain regulations relating to information; to make provision for a direct marketing code of practice; and for connected purposes.
Citation 2018 c 12
Introduced by Lord Ashton of Hyde
Territorial extent United Kingdom of Great Britain and Northern Ireland
Dates
Royal assent 23 May 2018
Commencement May 2018
Other legislation
Repeals Data Protection Act 1998
Relates to General Data Protection Regulation, Data Protection Act 1998
Status: Current legislation
Text of the Data Protection Act 2018 as in force today (including any amendments) within the United Kingdom, from legislation.gov.uk

The Data Protection Act 2018 (c 12) is a United Kingdom Act of Parliament that updates data protection laws in the UK. It is a national law which complements the European Union's General Data Protection Regulation (GDPR).

Background

The Data Protection Act 2018 achieved Royal Assent on 23 May 2018. It applies the EU's GDPR standards.[1] Whereas the GDPR gives member states limited opportunities to make provisions for how it applies in their country, one element of the DPA 2018 is the details of these, applying as the national law. The DPA 2018 is however not limited to the UK GDPR provisions. [2]

Contents

The Act is implemented in seven parts. These are outlined in Section 1:[3]

  1. This Act makes provision about the processing of personal data.
  2. Most processing of personal data is subject to the GDPR.
  3. Part 2 supplements the GDPR (see Chapter 2) and applies a broadly equivalent regime to certain types of processing to which the GDPR does not apply (see Chapter 3).
  4. Part 3 makes provision about the processing of personal data by competent authorities for law enforcement purposes and implements the Law Enforcement Directive.
  5. Part 4 makes provision about the processing of personal data by the intelligence services.
  6. Part 5 makes provision about the Information Commissioner.
  7. Part 6 makes provision about the enforcement of the data protection legislation.
  8. Part 7 makes supplementary provision, including provision about the application of this Act to the Crown and to Parliament.

The Act introduces new offences that include knowingly or recklessly obtaining or disclosing personal data without the consent of the data controller, procuring such disclosure, or retaining the data obtained without consent. Selling, or offering to sell, personal data knowingly or recklessly obtained or disclosed would also be an offence.[4]

Essentially, the Act implements the EU Law Enforcement Directive,[5] it implements those parts of the GDPR which 'are to be determined by Member State law' and it creates a framework similar to the GDPR for the processing of personal data which is outside the scope of the GDPR. This includes intelligence services processing, immigration services processing and the processing of personal data held in unstructured form by public authorities.

The GDPR will, by S3 of the European Union (Withdrawal) Act 2018,[6] be incorporated directly into domestic law immediately after the UK exits the European Union.

References

  1. ↑ "Publishing Service" (PDF). Gov-UK.
  2. ↑ "Data Protection Act 2018". ico.org.uk. 2018-07-20. Retrieved 2018-08-29.
  3. ↑ "Data Protection Act 2018". UK Government. Retrieved 8 August 2018. This article contains quotations from this source, which is available under the Open Government Licence v3.0. © Crown copyright.
  4. ↑ "New Data Protection Act finalised in the UK". www.out-law.com. Retrieved 2018-08-29.
  5. ↑ DIRECTIVE (EU) 2016/680 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL
  6. ↑ "European Union (Withdrawal) Act 2018". UK Government. Retrieved 8 August 2018.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.