Data Protection Act 2018

From 25 May 2018, the General Data Protection Regulation (GDPR) as supplemented by the UK Data Protection Act 2018 has legal effect.

This replacement data protection framework places new obligations on organisations and strengthens the rights that individuals have over the processing of their personal information.

You can also obtain full information about your rights from the Information Commissioner's Office (the ICO). The ICO is the UK's independent regulator responsible for upholding and enforcing the rights of individuals under data protection law.