The General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018 came into force on 25th May 2018. Originating from the EU, this legislation represented an overhaul of data protection legislation.
PSNC position: At present, the GDPR will continue to apply to the UK. It may be that any EU law which takes effect as a result of the UK’s EU membership, such as the GDPR, no longer applies post-Brexit, but that depends on the terms of the negotiated agreement to leave the EU. The position is likely to become clearer as the UK approaches closer to formally leaving the EU.