Privacy Laws & Business | August 07, 2017:
The Data Protection Bill will implement into UK law the GDPR derogations and the EU Data Protection Law Enforcement Directive, the government announced today. The majority of the EU General Data Protection Regulation (GDPR) provisions will automatically become UK law on 25 May 2018 when the GDPR enters into force.
In publishing its legislative plans, the government confirms that it will repeal the Data Protection Act 1998, but reflect it where possible, including reproducing the existing exemptions and safeguards as much as possible.
The government says it will seek to ensure that data flows ‘between the UK and the EU, and also appropriately between the UK and third countries and international organisations, remain uninterrupted after the UK’s exit from the EU’.
The proposed derogations include a provision under which organisations that currently process sensitive personal data in compliance with the DP Act can continue to do so under the GDPR.
To clarify lawfulness of processing for public interest purposes, the government says its policy aim is to reflect the DP Act as far as possible and continue to provide clarity as to what processing for ‘public interest purposes’ means.
To read full article – please click here.
