GDPR, DPA it's all about the data

As predicted, we are all still alive and kicking despite some of the horror scaremongering by some quarters in the lead up to GDPR.

In all the GDPR headlines, it may have escaped the notice of some that the UK got its own updated Data Protection Act 2018 (DPA), also implemented in May.

The new DPA pretty much reflects what was in the European GDPR and updates its predecessor the Data Protection Act 1998.

However, one new feature is the criminalisation of altering data records in response to a Subject Access Request. An individual is entitled to ask for a copy of the data you hold about them and under the new laws, you must supply this within 30 days without charge. If you find yourself in the sticky position of holding information that may drop you in it in some way, it is now a criminal offence to alter that data under Section 173 of the DPA. To avoid potentially finding yourself in the Magistrates Court over this, do take care as to the information you keep and record about people and always consider if it is necessary and appropriate.  

For advice on all aspects of data protection legislation Lawgistics Members can contact the legal team.

Authors: Nona Bowkis

Published: 22 Aug 2018


To ensure you are a real person signing up and to prevent automated signups (spamming) could we ask you to copy the letters and numbers shown below into the box.

(cAse SeNSItivE!)

There are no comments

Share this Article