Law: Data Protection Act 2018 (the Act) (not yet in force)

Regulator: Information Commissioner

Summary: On May 4, 2018, the Data Protection Act 2018 (the Act) was passed by the National Assembly and will come into force on a day to be fixed by the Minister for Justice by order published in the Gazette. The Act regulates the processing of personal data and establishes data protection principles related to notice and choice, disclosure, security, retention and data integrity. The Act also provides for data subject rights include the right to access, rectify and be informed of the processing of their personal data.