Law: Data Protection Act 2018 ('the Act') (not yet in force)

Regulator: Information Commissioner

Summary: The Act was published in the Official Gazette No. 31 on 7 June 2018, however it is not yet in force. Once in force, the Act would establish data protection principles related to notice and choice, disclosure, security, retention, data integrity, and access. The Act would also set out data subject access and rectification rights, regulate the processing of sensitive data, and empower the Information Commissioner to ensure compliance with the Act.