Offences under the Data Protection Act 2018
Produced in partnership with Sam Thomas of 2BR
Practice notesOffences under the Data Protection Act 2018
Produced in partnership with Sam Thomas of 2BR
Practice notesThis Practice Note explains the criminal offences contained within the Data Protection Act 2018 (DPA 2018). These provisions came into force on 25 May 2018.
For information about the purpose and scope of DPA 2018, see Practice Note: The Data Protection Act 2018.
DPA 2018 repealed the Data Protection Act 1998 (DPA 1998) as of 25 May 2018. Data protection offences which occurred prior to 25 May 2018, may still be prosecuted under DPA 1998 after that legislation has been repealed. For information on data protection and data handling offences under DPA 1998, see Practice Notes: Unlawfully obtaining data under the Data Protection Act 1998 [Archived] and Notification offences under the Data Protection Act 1998 [Archived].
The DPA 2018 was amended, by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations, SI 2019/419, to amend reference to ‘GDPR’ to ‘UK GDPR’ which came into effect on 31 December 2020.
DPA 2018 creates a number of principal and ancillary criminal offences in relation to personal data:
- •
unlawful obtaining etc of data
To view the latest version of this document and thousands of others like it,
sign-in with LexisNexis or register for a free trial.