Data protection essentials

Data protection laws in both the UK and EEA (the EU plus Iceland, Norway, and Liechtenstein) are intended to ensure information about living individuals (within the definition of ‘personal data’) is used fairly and responsibly.

To help ensure that, both the UK and data protection laws impose a large number of obligations on those ‘processing’ personal data (and on controllers of such processing) and grant rights to those whose personal data is processed (the ‘data subjects’). In summary, ‘processing’ includes doing almost anything with personal data, including storing, sharing, deleting or using it.

UK data protection law is largely derived from EEA data protection laws and is therefore generally based on similar principles, although there are some detailed differences.

This subtopic provides certain core resources commonly required by commercial lawyers when addressing UK and EEA data protection laws under:

•
the EU’s General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) regime, which applies under the laws of

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Public Law News

IMA investigates EU citizens' rights challenges in Northern Ireland

The Independent Monitoring Authority (IMA) has conducted a fact-finding mission to Belfast, and found a number of challenges faced by EU, EEA, and EFTA citizens in Northern Ireland (NI). The investigation revealed a disproportionately high rate of EU Settlement Scheme (EUSS) refusals in NI, at 21% compared to 9-14% elsewhere in the UK. Key issues identified include difficulties in providing evidence of residency, lack support for EUSS applications, and limited access to immigration legal advice. The IMA also highlighted concerns regarding impromptu checks around the border between Northern Ireland and Ireland leading to some detentions of persons prior to removal where they ‘struggle to prove their rights yet have no access to advice’, and healthcare access problems stemming from misunderstandings about EUSS status. The visit also found a lack of awareness about the requirements for continuous residence, including that some EU citizens had been unknowingly crossing the border into Ireland for prolonged periods, unaware that this could have implications for their ongoing eligibility under the EUSS.

MoJ appoints new Chair for Independent Monitoring Authority

The Ministry of Justice (MoJ) has announced the appointment of Nicole Lappin as the new Chair of the Independent Monitoring Authority (IMA), commencing 1 January 2025 for a four-year term. The IMA, established under the EU (Withdrawal Agreement) Act 2020, is tasked with monitoring the implementation of citizens' rights provisions in the UK's Withdrawal Agreement with the EU and Separation Agreement with EEA EFTA states. The authority possesses significant powers, including the ability to receive complaints, launch inquiries and initiate or intervene in legal proceedings. Lappin, an experienced public sector leader with a background in law and regulation, will oversee the IMA's mandate to review the effectiveness of the legislative framework relating to citizens' rights and address systemic issues in their implementation.

SLSC publishes twelfth Report of Session 2024—2025

The Secondary Legislation Scrutiny Committee (SLSC) has published its twelfth report of session 2024—2025. The following instrument has been drawn to the special attention of the House: Advertising (Less Healthy Food Definitions and Exemptions) Regulations 2024 (SI 2024/1266). The following are instruments of interest: draft Airports Slot Allocation (Alleviation of Usage Requirements etc.) Regulations 2025; draft Register of Overseas Entities (Protection and Trusts) (Amendment) Regulations 2025; draft Separation of Waste (England) Regulations 2025; Prison and Young Offender Institution (Interception of Communications)(Amendment) Rules 2024 (SI 2024/1217); Damages (Personal Injury) (England and Wales) Order 2024 (SI 2024/1261); Branded Health Service Medicines (Costs) (Amendment) Regulations 2024 (SI 2024/1277); and Tribunal Procedure (Amendment No. 2) Rules 2024 (SI 2024/1283). The following instruments were not drawn to the special attention of the House: draft instruments subject to affirmative approval; draft instruments subject to annulment; and made instruments subject to annulment.

DUP intends to use 'Stormont Brake' for the first time

The Democratic Unionist Party, the second-largest party in the Northern Ireland Assembly, says it has notified the Speaker of the Assembly of its intention to use the ‘Stormont Brake’ mechanism for the first time under the Windsor Framework.