Data Protection Provisions: Quick Facts

From 25 May 2018, the main law on collecting and processing personal data is the General Data Protection Regulation, which effectively replaces the Data Protection Act 1998.

A data controller determines the purposes and means of processing personal data. The data controller is responsible for, and must be able to demonstrate, compliance with the data protection principles. Notification

Personal data means any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. Personal Data

Employers must have a valid lawful basis in order to process personal data. Processing