Introduction to the EU GDPR and UK GDPR

Published by a ÀÏ˾»úÎçÒ¹¸£Àû Information Law expert
Practice notes

Introduction to the EU GDPR and UK GDPR

Published by a ÀÏ˾»úÎçÒ¹¸£Àû Information Law expert

Practice notes
imgtext

This Practice Note provides an introduction to both the EU’s General Data protection Regulation, Regulation (EU) 2016/679 (EU GDPR) and United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (UK GDPR). For a higher-level overview of UK and EEA data protection laws, see Practice Note: Data protection law—new starter guide. The Data protection toolkit collates further key guidance on those regimes and is a recommended starting point for research.

In brief

Data protection law in both the EEA (the EU plus Iceland, Norway, and Liechtenstein) and UK is intended to ensure information about living individuals (within the definition of ‘personal data’) is used fairly and responsibly.

To help ensure that, both EEA and UK data protection laws impose a large number of obligations on those ‘processing’ personal data (and on controllers of such processing) and grant rights to those whose personal data is processed (the ‘data subjects’). In summary, ‘processing’ includes doing almost anything with personal data, including storing, sharing, deleting or using it.

UK data protection law (particularly Assimilated

Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Key definition:
Data protection definition
What does Data protection mean?

In an employment context, this refers to the obligation on an employer to protect the data of its employees and ensure that it complies with the law on how it uses the employees' data.

Popular documents