An overview of the data protection regime created by the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

This note focuses on the concepts and definitions established by the legislation, the data protection principles, the processing of personal data, special categories of personal data and criminal offence data, compliance and enforcement.