1. THE GDPR GENERALLY
1.1 The GDPR
The General Data Protection Regulation
("GDPR") came into effect on 25 May
2018. It was recommended in our January 2018 update (available here) that trustees undertake a number of
actions to ensure compliance with their obligations in advance of
the enforcement date. If trustees have not yet completed these
actions and you require further advice or information on the effect
of GDPR on trustees' obligations, please contact us.
1.2 Data Protection Act 2018
The Data Protection Act 2018 (the
"Act") was signed into law on 24 May
2018 with effect from 25 May 2018. While the GDPR did not require
implementing national legislation to be effective, the Act, along
with related regulations which the Government may introduce, is
designed to give effect to the GDPR and to provide clarity on
provisions which allow a certain limited flexibility to data
controllers and processors. Of particular interest to trustees is
section 50 of the Act
