Last review date: 20 January 2025
☒ omnibus – all personal data
☒ sector-specific
e.g., telecoms
Last review date: 20 January 2025
- UK General Data Protection Regulation ("UK GDPR"), being the EU General Data Protection Regulation ("GDPR") as it forms part of the law of the UK and as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019
- UK Data Protection Act 2018 (DPA 2018)
- Privacy and Electronic Communications Regulations 2003 ("PECR")
Last review date: 20 January 2025
- Network and Information Security Regulations 2018 (SI 2018/506)
- Product Security and Telecommunications Infrastructure Act 2022
- Communications Act 2003
- Computer Misuse Act 1990, which includes cybersecurity related criminal offences
- Financial Conduct Authority Handbook and Prudential Authority Rulebook
Last review date: 20 January 2025
N/A
Last review date: 20 January 2025
Yes.
On 23 October 2024, the new Labour Government published a new Data (Use and Access) Bill ("DUA Bill"). Although similar in many respects to previous proposals, the DUA Bill is different to the previous Data Protection and Digital Information Bill (No. 2) (and the first Data Protection and Digital Information Bill, introduced by the previous Conservative Government in 2022 and 2023 respectively.
Importantly, the new DUA Bill does not contain the previous proposals which would have impacted data protection officers/senior responsible individuals, removal of the record of processing requirement and removal of the UK representative requirement under Article 27 of the UK GDPR, amongst others.