Dispute resolution—data protection and GDPR considerations
Produced in partnership with Miriam Everett (Global Head of Data and Privacy, Partner), Julian Copeman (Partner) and Hannah Brown (Associate) of Herbert Smith Freehills

The following Dispute Resolution practice note produced in partnership with Miriam Everett (Global Head of Data and Privacy, Partner), Julian Copeman (Partner) and Hannah Brown (Associate) of Herbert Smith Freehills provides comprehensive and up to date legal information covering:

  • Dispute resolution—data protection and GDPR considerations
  • Background to GDPR and DPA 2018
  • Information Commissioner's Office (ICO) guidance
  • Article 29 Working Party/European Data Protection Board guidance
  • What constitutes personal data?
  • What constitutes ‘processing’ personal data in litigation proceedings?
  • Identifying controllers and processors
  • Joint controllers
  • The role of litigation parties
  • Solicitors, barristers or legal representatives
  • More...

Dispute resolution—data protection and GDPR considerations

On 31 January 2020, the UK ceased to be a member of the EU and EEA. This Practice Note introduces:

  1. the General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) regime (applicable under UK law until the end of the Brexit implementation period (11 pm UK time on 31 December 2020) and remaining applicable in the EEA—any references to EEA or EU states in this Practice Note should therefore be read to also include the UK until the end of that implementation period), and

  2. the United Kingdom General Data Protection Regulation, Retained Regulation (EU) 2016/679 (UK GDPR) regime (applicable under UK law from the end of the Brexit implementation period)

Where there is no need to distinguish the two regimes, this Practice Note refers to both as the ‘GDPR’ for convenience.

When considering the general processing of personal data, both the UK GDPR and the Data Protection Act 2018 (DPA 2018) should be read together as both sets of provisions directly apply. Practitioners will find it most helpful to take the UK GDPR as their starting point and then consider the specific supplementary provisions of the DPA 2018.

This Practice Note considers the UK and EU GDPR regimes, the DPA 2018 and other data protection issues that should or may be considered in connection with dispute resolution proceedings. In the context of

Related documents:

Popular documents