On Friday 25 May 2018, the EU General Data Protection Regulation (Regulation (EU) 2016/679), commonly referred to by its acronym of GDPR, comes into force across the EU. In the UK, this will be accompanied by the coming into force of the Data Protection Act 2018 which received Royal Assent on 23 May 2018. The new Act repeals the existing Data Protection Act 1998 and revokes the secondary legislation made under the 1998 Act.
The GDPR is directly applicable, which means that with the exception of limited areas of Member State discretion, it applies in the UK without further need for national legislation. The Data Protection Act 2018 addresses those areas of Member State discretion, and also implements the new Data Protection Directive for Police and Criminal Justice Authorities (Directive (EU) 2016/680), which is designed to protect individuals’ personal data when their data is being processed by police and criminal justice authorities, and to improve cooperation in the fight against terrorism and cross-border crime in the EU by enabling police and criminal justice authorities in EU countries to exchange information necessary for investigations efficiently and effectively.
Andrew Charlesworth, Reader in IT law at the University of Bristol Law School, is currently actively engaged in the analysis of the new rules through a series of short articles on the GDPR in conjunction with Cloudview (UK) Limited. Andrew is also providing key expertise in the development of the Privacy Flag initiative. You can access Andrew’s analysis and other work through the links provided in this post. Continue reading →
On 3rd August 2017 it was announced that, a week before, the High Court had rejected a claim, brought in judicial review proceedings by Dr Salman Butt, that the inclusion of his name in an official press release about tackling extremism in universities and colleges was unlawful and in breach of his human rights (Salman Butt v Secretary of State for the Home Department  EWHC 1930 (Admin)). Relying on information provided by the Home Office Extremism Analysis Unit (EAU), which had opposed the publication of any names, the press release referred to 70 events on university premises in 2014 featuring ‘hate speakers’. However, as the result of an ‘oversight’, six people including Dr Butt, were also identified as ‘expressing views contrary to British values’ on campus. The judgment in this case is the first significant judicial contribution to the debate about the ‘Prevent duty’ created by s.26 of the Counter-Terrorism and Security Act 2015 (CTSA) which requires schools, universities, the NHS and other institutions to ‘have due regard to the need to prevent people from being drawn into terrorism’. Continue reading →