Statements (35)
Predicate | Object |
---|---|
gptkbp:instanceOf |
privacy law
|
gptkbp:accessibleBy |
right to access
right to data portability right to erasure right to object right to rectification right to restrict processing rights related to automated decision making |
gptkbp:appliesTo |
controllers
processors organisations outside UK processing UK residents' data |
gptkbp:basedOn |
EU GDPR
|
gptkbp:derivedFrom |
EU GDPR as retained in UK law after Brexit
|
gptkbp:enforcedBy |
gptkb:Information_Commissioner's_Office
|
gptkbp:fullName |
United Kingdom General Data Protection Regulation
|
gptkbp:hasSupplement |
gptkb:Data_Protection_Act_2018
|
https://www.w3.org/2000/01/rdf-schema#label |
UK GDPR
|
gptkbp:jurisdiction |
gptkb:United_Kingdom
|
gptkbp:legalBasis |
consent
contractual necessity legal obligation legitimate interests public task vital interests |
gptkbp:penalty |
fines up to £17.5 million or 4% of annual global turnover
|
gptkbp:purpose |
protect personal data
|
gptkbp:regulates |
processing of personal data
|
gptkbp:replacedBy |
gptkb:Data_Protection_Act_1998
|
gptkbp:requires |
data breach notification
data protection impact assessment appointment of Data Protection Officer (in some cases) |
gptkbp:startDate |
2021-01-01
|
gptkbp:transferRestrictions |
personal data transfers outside UK
|
gptkbp:bfsParent |
gptkb:General_Data_Protection_Regulation_(GDPR)
|
gptkbp:bfsLayer |
7
|