Data Protection Act 2018
| Act of Parliament | |
| Long title | An Act to make provision for the regulation of the processing of information relating to individuals; to make provision in connection with the Information Commissioner’s functions under certain regulations relating to information; to make provision for a direct marketing code of practice; and for connected purposes. |
|---|---|
| Citation | 2018 c. 12 |
| Introduced by | Matt Hancock (Commons) Henry Ashton, 4th Baron Ashton of Hyde (Lords) |
| Territorial extent | United Kingdom of Great Britain and Northern Ireland |
| Dates | |
| Royal assent | 23 May 2018 |
| Commencement | Fully in force as of 2 December 2019 |
| Other legislation | |
| Repeals/revokes | Data Protection Act 1998 |
| Amended by |
|
| Relates to | |
Status: Current legislation | |
| History of passage through Parliament | |
| Text of statute as originally enacted | |
| Revised text of statute as amended | |
The Data Protection Act 2018 (c. 12) is an act of the Parliament of the United Kingdom which updates data protection laws in the UK. It is a national law which complements the European Union's General Data Protection Regulation (GDPR) and replaces the Data Protection Act 1998.
The act was to be significantly amended by the Data Protection and Digital Information Bill. That bill was abandoned due to the 2024 United Kingdom general election, but the phased implementation of the Data (Use and Access) Act 2025 will make changes to the operation of the 2018 Act.