Key definitions under UK data protection law


Published by a ³ÉÈËÓ°Òô Information Law expert
Practice notes

Key definitions under UK data protection law


Published by a ³ÉÈËÓ°Òô Information Law expert

Practice notes
imgtext

This Practice Note provides further guidance on key definitions used in the United Kingdom General Data Protection Regulation, Assimilated Regulation (EU) 2016/679 (the UK GDPR).

Assimilated law is the name given to retained EU law (REUL) which remains in force after the end of 2023. The re-categorisation of REUL (and associated terms) to assimilated law reflects a change in its status and treatment under UK law, in that it is generally to be interpreted according to ordinary domestic law and principles.

From 1 January 2024, REUL is ‘assimilated’ into domestic law by virtue of the fact it is generally stripped of EU-derived interpretive effects (eg supremacy of EU law, directly effective rights, and general principles previously retained under the European Union (Withdrawal) Act 2018). For more information, see Practice Note: Assimilated law and News Analysis: Implications of the move to ‘assimilated’ law, and the Retained EU Law (Revocation and Reform) Act 2023, for data protection lawyers.

For a high-level introduction to UK data protection laws, see Practice Notes: Introduction to the EU GDPR and UK GDPR

Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Related legal acts:

Popular documents

What are the differences between joint controllers and controllers in common under the GDPR? What is the

What are the differences between joint controllers and controllers in common under the GDPR? What is the difference in liability if a party is a joint controller with another, compared to where the parties are controllers in common?(1) What are the differences between joint controllers and

TikTok sues European Data Protection Board at EU General Court

MLex: TikTok has sued the European Data Protection Board (EDPB) at the EU General Court, not long after it was fined €345m in a case involving the board. The EDPB, which is the umbrella body of EU data protection watchdogs, played a role in the case because it went through the EU General Data

Is someone’s voice personal identifiable information under GDPR? If someone is to do a voice over for

Is someone’s voice personal identifiable information under GDPR? If someone is to do a voice over for content of some training for a business, would a consent form be needed?Is someone’s voice personal identifiable information under GDPR?A voice recording is likely, in almost all circumstances, to

What is the difference between an appeal and a review?

What is the difference between an appeal and a review?What is an appeal?An appeal in insolvency proceedings is no different to an appeal in normal litigation. An appeal will be allowed only if the appeal court is satisfied that the decision of the lower court was 'wrong' or 'unjust because of a