The 1998 Data Protection Act in the UK largely restates existing good practice: individuals have a right to know what data are held about them and why; and those processing data have a duty to proceed ...

The Data Protection Act (DPA) 2018 is the UK’s data protection law. It brings the EU’s General Data Protection Regulation (GDPR) into the UK’s legal system and defines how personal data should be ...

British Council has been found in breach of the Data Protection Act after losing an unencrypted computer disc containing the sensitive data of 2,000 employees. In December 2008, the disc went missing ...