The Data Protection Act (DPA) 2018 is the UK’s data protection law. It brings the EU’s General Data Protection Regulation (GDPR) into the UK’s legal system and defines how personal data ...

Research provisions: The act keeps the DP Bill’s provisions that clarify that companies can use personal data for research and development projects as long as they follow data protection safeguards.

British Council has been found in breach of the Data Protection Act after losing an unencrypted computer disc containing the sensitive data of 2,000 employees.