Data Protection Act 2018

The Act updates and replaces the UK’s previous data protection laws so they fit the realities of the digital age, where large amounts of personal data are constantly being collected and used.

It aligns UK standards with modern EU data protection rules, giving people stronger rights and more control over how their information is used.

It also ensures the UK has a robust data protection framework for the future, including after leaving the EU. 

The Act covers 4 main areas:  

1. general data processing 
2. data processing for law enforcement 
3. data processing by intelligence services 
4. the regulation and enforcement of data protection rules 

Read more about the Data Protection Act 2018.