When attempting to determine how to proceed with privacy and data compliance, many small businesses are questioning why there is a new Data Protection Act 2018 and European Union’s GDPR. The simplified answer is that the GDPR and the DPA 2018 complement one another
The GDPR was adopted on 14 April 2016, and became enforceable on 25 May 2018. The majority of the intricate legal conditions that all enterprises must comply with are defined in the GDPR itself. However, the GDPR doesn’t incorporate everything that is necessary to have a feasible data protection program, therefore each EU country continues to have some of its individual regulation to “fill the gaps”, this is where the new UK Data Protection Act 2018 comes into play.
It fills in the gaps that were deliberately left out of the GDPR to provide each member state limited flexibility in execution, make provision for exactly how it is applicable in each country and the Data Protection Act 2018 fills those gaps for the UK.
It expands on and points out exactly how data protection laws relate to particular broad areas that are omitted from GDPR and are dealt with by each individual member state, for example immigration and law enforcement.
It outlines the elaborate conditions necessary for the financing and performance of the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
It additionally manages some administrative details, for instance repealing the previous Data Protection Act 1998 and making adjustments required to cope with the communication with relevant laws just like the Freedom of Information Act.
The Data Protection Act 2018 therefore rests together with the GDPR. When evaluating your data protection responsibilities, both the GDPR and the new DPA 2018 have to be employed.
Download Your FREE GDPR Guide
This guide is all about GDPR
