Data protection offences

The Data Protection Act 2018 (DPA 2018) came into force on 25 May 2018. As originally enacted, DPA 2018 implemented the provisions and permitted derogations into UK law contained within General Data Protection Regulation (EU) 2016/679 (EU GDPR), as well as provisions of the Law Enforcement Directive (EU) 2016/680 (EU LED), which applied data protection standards generally to personal data and provided a distinct data protection framework for intelligence purposes. Post Brexit, the UK General Data Protection Assimilated Regulation (EU) 2016/679 (UK GDPR) provides the framework in domestic law for the regulation of data protection. EU GDPR regime remains applicable under the laws of states in the EU and wider EEA. UK GDPR regime generally preserves the core EU GDPR standards in UK domestic law such as the data protection principles, rights of data subjects and obligations for controllers and processors. However, there are some differences resulting from changes made by Brexit legislation.

For detailed information on the requirements of DPA 2018, UK GDPR and EU GDPR, see:

•
Data protection regime—overview
•
The Data Protection Act 2018
•
Processing personal data by law enforcement and

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Corporate Crime News

Spotlight on Corruption considers whether the first UWO was really a success

The National Crime Agency (NCA) obtained its first Unexplained Wealth Order (UWO) last summer against Zamira Hajiyeva, securing the forfeiture of her £14m Knightsbridge home and a Berkshire golf club. While the NCA hailed this as a success, the settlement allowed Hajiyeva to retain 30% of the property values and her jewellery collection. The protracted legal battle also exposed significant challenges in securing UWOs, including resource-intensive litigation, difficulties in pursuing overseas politically exposed persons and complexities in proving the unlawful origin of funds. The case has prompted discussions on potential reforms, such as limiting 'interested party' status for hidden beneficial owners and forfeiting rights for those using corporate structures to conceal ownership. Spotlight on Corruption explores the issues raised by this case.

US Department of Justice reaches settlement with McKinsey & Company Africa

The US Department of Justice has announced a settlement with McKinsey & Company Africa (Pty) Ltd, requiring the firm to pay over $122m to resolve an investigation into bribery of South African government officials between 2012 and 2016. The company entered into a three-year deferred prosecution agreement, admitting to conspiracy to violate the Foreign Corrupt Practices Act. The scheme involved bribing officials at state-owned entities Transnet and Eskom to secure lucrative consulting contracts. A former senior partner, Vikas Sagar, has pleaded guilty to a related charge. The resolution, coordinated with South African authorities, reflects a 35% reduction in penalties due to McKinsey Africa's cooperation and remedial measures. This case marks the third coordinated resolution between the US and South Africa in two years, demonstrating the efficacy of the International Corporate Anti-Bribery initiative.

Health and safety prosecution round-up—6 December 2024

A round-up of the latest health and safety prosecutions, including a company fined after a prisoner dies and another company fined £1.2m after an employee suffers serious injuries.

Environmental enforcement round-up—6 December 2024

A round-up of the latest environmental enforcement, including a company served with a civil penalty for permanently diverting and straightening a watercourse, without an authorisation.

View Corporate Crime by content type :

News