EU General Data Protection Regulation (GDPR) and the Data Protection Act 2018

The GDPR took effect on 25 May 2018 and the Data Protection Act 2018 received Royal Assent on 23 May 2018. The instruments together create a new regime governing the rights of data subjects and the obligations of those who possess and process personal data. The new legislation, which will remain at the top of the agenda for employment lawyers throughout 2019, requires many employers to make substantial changes to their existing processes to comply with new rules governing the processing of personal data, including those relating to consent, transparency and access rights.

---