The Regulation will have direct effect in all EU member states and, if the UK is still a member of the EU in 2018, the Regulation will effectively replace the Data Protection Act 1998. The central themes of the Regulation are not radically different from those in the Data Protection Act but the Regulation will alter a number of the existing requirements imposed on organisations and create several entirely new obligations.  However, enforcement of the data protection obligations will be tightened under the Regulation and the maximum potential fines which the ICO can impose for data breaches will rise from £500,000 to €20,000,000 (or up to 4% of the total worldwide annual turnover of the organisation, whichever is higher).  

The impact of the Regulation on organisations in the UK will now depend on the outcome of the EU referendum in June. If the UK remains in Europe, private and public organisations which process personal data will need to begin reviewing how they handle personal data to ensure their compliance with the impending Regulations.

The Information Commissioner is encouraging organisations to now start their preparations for the implementation of the Regulation. Between now and May 2018, we will be providing regular updates and seminars concerning the steps which organisations will need to take to ensure compliance with the new Regulation.


Meet our Data Protection Experts

Jonathan Moore

Emma Godding

Joanna Smart

Our use of cookies

We use necessary cookies to make our site work. We'd also like to set optional analytics cookies to help us improve it. We won't set optional cookies unless you enable them. Using this tool will set a cookie on your device to remember your preferences. For more detailed information about the cookies we use, see our Cookies page.

Necessary cookies

Necessary cookies enable core functionality such as security, network management, and accessibility. You may disable these by changing your browser settings, but this may affect how the website functions.

Analytics cookies

We'd like to set Google Analytics cookies to help us to improve our website by collection and reporting information on how you use it. The cookies collect information in a way that does not directly identify anyone.
For more information on how these cookies work, please see our Cookies page.