Data Protection Act 2018

Nearly a year after its announcement in the Queen’s speech, the Data Protection Bill has worked its way through parliament with much debate and, with Royal Assent, has moved into UK law as the new Data Protection Act 2018.

The new Act updates data protection laws in the UK, and sits alongside the General Data Protection Regulation (GDPR) which is also due took effect on 25th May 2018. The Act implements the EU Law Enforcement Directive (LED), as well as extending domestic data protection laws to areas which are not covered by the GDPR.

The previous Data Protection Act, passed a generation ago, failed to account for today’s internet and digital technologies, social media and big data. Our personal data is a version of each of us – what we’ve done, what we’ve read, where we’ve been and who is in our network.

Data Protection Act 2018

It is our health status, our financial decisions, our political beliefs and affiliations. Our desire to book a flight, update our browser, or sign up for a service should not be governed merely by terms and conditions set by an organisation. Life is too short to decipher fine print.

The legislation requires increased transparency and accountability from organisations, and stronger rules to protect against theft and loss of data with serious sanctions and fines for those that deliberately or negligently misuse data.

The creation of the Data Protection Act 2018 is not an end point, it’s just the beginning, in the same way that preparations for the GDPR don’t end on 25 May 2018.  Effective data protection requires clear evidence of commitment and ongoing effort.

Data Protection Act 2018

It’s an evolutionary process for organisations –no business, industry sector or technology stands still. Organisations must continue to identify and address emerging privacy and security risks in the weeks, months and years beyond 2018.

Full details of this announcement can be found on the ICO website, click here.

GDPR Data Solutions is here to help businesses navigate these new laws. We provide data protection training and advice that organisations can trust.