New ICO Guidance On GDPR

Last month marked the most significant change in data law of the last two decades, as the much awaited General Data Protection Regulations (GDPR) came into force along with the Data Protection Act 2018 (repealing and replacing its 1998 namesake). With all of the focus and required administration leading up to their commencement date of 25 May, it would be understandable if organisations have not yet had time to read over some of the practical data protection guidance recently issued by the Information Commissioner's Office (ICO). 

Two of the latest publications from the ICO provide valuable insights and practical know-how on some of the key concepts introduced by the GDPR. The first is an expansion of the ICO's main guide to the GDPR, and provides further coverage on the right of access and the right to object. The second, which is also worth reading, is the final guidance document on data protection impact assessments.