The UK General Data Protection Regulation (UK GDPR)—Navigator

Published by a ³ÉÈËÓ°Òô Information Law expert
Practice notes

The UK General Data Protection Regulation (UK GDPR)—Navigator

Published by a ³ÉÈËÓ°Òô Information Law expert

Practice notes
imgtext

This Practice Note serves as a reference guide to the United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR) and the Data Protection Act 2018 (DPA 2018) as applicable to general processing of personal data (the UK GDPR regime).

This UK GDPR regime is derived from the EU data protection regime, the General Data Protection Regulation, Regulation (EU) 2016/679 (the EU GDPR), which became directly applicable in all EU Member States on 25 May 2018 and which governs the processing of personal data across the EEA (the EU plus Iceland, Norway, and Liechtenstein), since its incorporation into the EEA Agreement. Assimilated law is the name given to retained EU law (REUL) which remains in force after the end of 2023, such as the UK GDPR. The re-categorisation of REUL (and associated terms) to assimilated law reflects a change in its status and treatment under UK law, in that it is generally to be interpreted according to ordinary domestic law and principles. From 1 January 2024, REUL is ‘assimilated’ into domestic

Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Key definition:
Data protection definition
What does Data protection mean?

In an employment context, this refers to the obligation on an employer to protect the data of its employees and ensure that it complies with the law on how it uses the employees' data.

Popular documents