GDPR

Introduction

The EU General Data Protection Regulation (GDPR) was approved in 2016 and will become directly applicable as law in the UK from 25th May 2018. The current Data Protection Bill, which will become the Data Protection Act 2018 (DPA18), fills in the gaps in of the GDPR, addressing areas in which flexibility and derogations are permitted.

The GDPR will not be directly applicable in the UK post Brexit – it is expected that the DPA 2018 will ensure continuity by putting in place the same data protection regime in be UK law pre- and post- Brexit, to create a data protection regime in the UK equivalent to that introduced by the GDPR which will continue to be applicable throughout the EU member states.