The European General Data Protection Regulation (GDPR) will apply directly in the UK from 25 May 2018, and will make some fundamental changes to the current requirements surrounding data protection. Key areas of change include:
- the information which must be contained in privacy notices (notices stating the use to which an individual's personal data may be put);
- what must be done when seeking individuals' consent to the processing of their data; requirements around data subject access requests (when individuals can demand to see the personal data being held about them); and
- accountability and the sanctions for failure to comply...
Please see full publication below for more information.