The Shifting Sands Of Data Protection

The law is often criticised as being outdated and archaic. As a profession we often rely on statutes and case law which are many years old and which haven't been amended for long periods of time – not a criticism that can be levelled at data protection law.

In fact, many organisations struggle to make sense of the constantly changing data protection regime and how best to comply. The introduction of EU GDPR, the Data Protection Act 2018, UK GDPR and the wider implications of Brexit on data protection compliance have caused uncertainty about exactly what organisations need to do, and when. For those organisations that send personal data overseas, the road to compliance has been particularly bumpy.