The General Data Protection Regulation (or the GDPR for short) is the legal framework which was implemented across the EU on 25 May 2018.In the UK, the legislation supersedes the Data Protection Act 1998. However, some businesses have wrongly assumed that Britain’s vote to leave the EU means that they do not have to worry about the GDPR. In fact, the referendum result makes no difference to the system which has been introduced.

Employers need to be aware that the current GDPR rules represent a significant change to the way in which businesses use and store data, and that the new law includes a number of additional rights for both employees and customers.

The penalties for failing to comply with the GDPR are considerable, with those who breach the regulations facing a fine of up to €20 million or 4% of their annual turnover.

All businesses must ensure they remain compliant with the requirements of the GDPR. At Carter Lemon Camerons, our expert lawyers can advise on how the legislation works in practice and ensure that you are compliant.