Notification offences under the DPA 1998
Notification offences under the DPA 1998

The following Corporate Crime guidance note provides comprehensive and up to date legal information covering:

  • Notification offences under the DPA 1998
  • Changes as a result of the General Data Protection Regulation
  • Digital Economy Act 2017
  • Notification required under the Data Protection Act 1998
  • Exemptions from notification under the DPA 1998
  • Processing without an entry on the register
  • Elements of the offence of processing without entry on the register
  • Failing to notify changes under the DPA 1998
  • Elements of the offence of failing to notify changes
  • Failing to make particulars available under the DPA 1998
  • more

Changes as a result of the General Data Protection Regulation

The General Data Protection Regulation (EU) 2016/679 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data is directly applicable and fully enforceable in all EU Member States from 25 May 2018.

The GDPR made substantial amendments to data protection law in the UK. See Practice Notes:

  1. The General Data Protection Regulation (GDPR)

  2. Data protection principles under the GDPR

  3. Sanctions and enforcement under the GDPR

Specific implementing legislation is not required, although the GDPR does allow Member States to introduce further domestic provisions in a number of areas. In the UK, this has been achieved by the Data Protection Act 2018 (DPA 2018). See Practice Note: The Data Protection Act 2018.

The DPA 2018 repealed the Data Protection Act 1998 (DPA 1998) from 25 May 2018 and creates a number of criminal offences relating to the processing and use of personal data in the UK. For information on the offences which are created by the DPA 2018, all of which can be committed from 25 May 2018, see Practice Note: Offences under the Data Protection Act 2018.

Where a notification offence occurred before 25 May 2018, it may still be prosecuted under DPA 1998 despite the fact that the legislation