This Practice Note, written by Craig Ward of Lundie, of Craybeck Law, provides an introduction to Assimilated Regulation (EU) 2016/679, the UK General Data Protection Regulation (UK GDPR) for LPA attorneys and Court of Protection deputies. It explains when attorneys and deputies will be data controllers (DCs) under DPA 1998 and the UK GDPR and sets out the obligations of attorneys and deputies as DCs. The Practice Note goes on to examine the issue of consent to data processing in the context of mentally incapacitated data subjects (DSs) (also protected persons or vulnerable persons) and looks at scenarios where an attorney or deputy might face a conflict of interest between their role as attorney/deputy and their role as DC. Guidance is also provided for attorneys and deputies on dealing with requests for disclosure.