Data Protection Act 2018 (DPA 2018)
The Data Protection Act 2018 is the UK law that, together with the UK GDPR, sets the framework for processing personal data.
What is Data Protection Act 2018 (DPA 2018)?
The DPA 2018 fills in details the GDPR leaves to national law, covers law-enforcement and intelligence processing, and sets the ICO's powers. It has since been amended, including by the Data (Use and Access) Act 2025.