General Data Protection Regulation: Difference between revisions

Revision as of 21:16, 26 February 2025

Revision as of 23:46, 6 March 2025

Line 239:

[[File:EU-UK GDPR divergence.webm|thumb|Explanation of the possible results from UK's divergence from the European GDPR<ref>{{cite web |title=Digital Rights post-Brexit |url=https://www.youtube.com/watch?v=efz4utnzjjI |website=Youtube | date=2 November 2022 |publisher=[[Open Rights Group]] |access-date=27 November 2022 |archive-date=22 November 2022 |archive-url=https://web.archive.org/web/20221122202536/https://www.youtube.com/watch?v=efz4utnzjjI&gl=US&hl=en |url-status=live }} Video from Open Rights Group developed as an explainer of the UK's proposals</ref>]] The applicability of GDPR in the United Kingdom is affected by [[Brexit]]. Although the United Kingdom formally withdrew from the European Union on 31 January 2020, it remained subject to EU law, including GDPR, until the end of the transition period on 31 December 2020.<ref name=":5" /> The United Kingdom granted [[royal assent]] to the [[Data Protection Act 2018]] on 23 May 2018, which augmented the GDPR, including aspects of the regulation that are to be determined by national law, and criminal offences for knowingly or recklessly obtaining, redistributing, or retaining personal data without the consent of the data controller.<ref>{{Cite web|url=https://www.out-law.com/en/articles/2018/may/new-data-protection-act-finalised-uk/|title=New Data Protection Act finalised in the UK|website=Out-Law.com|url-status=live|archive-url=https://web.archive.org/web/20180525120311/https://www.out-law.com/en/articles/2018/may/new-data-protection-act-finalised-uk/|archive-date=25 May 2018|access-date=25 May 2018}}</ref><ref>{{Cite news|url=https://www.computerweekly.com/news/252441814/New-UK-Data-Protection-Act-not-welcomed-by-all|title=New UK Data Protection Act not welcomed by all|work=Computer Weekly|first=Warwick|last=Ashford|date=24 May 2018|access-date=25 May 2018|url-status=live|archive-url=https://web.archive.org/web/20180524143548/https://www.computerweekly.com/news/252441814/New-UK-Data-Protection-Act-not-welcomed-by-all|archive-date=24 May 2018}}</ref>

Under the [[European Union (Withdrawal) Act 2018]], existing and relevant EU law was transposed into localUK law upon completion of the transition, and the GDPR was amended by [[Statutory instrument (UK)|statutory instrument]] to remove certain provisions no longer needed due to the UK's non-membership in the EU. Thereafter, the regulation will be referred to as "UK GDPR".<ref>{{Cite web|url=https://www.theverge.com/2020/2/20/21145180/google-uk-user-data-processing-ireland-usa-authorities-data-protection-gdpr-cloud-act|title=Google shifts authority over UK user data to the US in wake of Brexit|last=Porter|first=Jon|date=20 February 2020|website=The Verge|language=en|access-date=20 February 2020|archive-date=20 February 2020|archive-url=https://web.archive.org/web/20200220164636/https://www.theverge.com/2020/2/20/21145180/google-uk-user-data-processing-ireland-usa-authorities-data-protection-gdpr-cloud-act|url-status=live}}</ref><ref name=":6" /><ref name=":5" /> The UK will not restrict the transfer of personal data to countries within the EEA under UK GDPR. However, the UK will become a ''third country'' under the EU GDPR, meaning that personal data may not be transferred to the country unless appropriate safeguards are imposed, or the European Commission performs an adequacy decision on the suitability of British data protection legislation (Chapter V). As part of the [[Brexit withdrawal agreement|withdrawal agreement]], the European Commission committed to perform an adequacy assessment.<ref name=":5" /><ref name=":6" />

In April 2019, the UK [[Information Commissioner's Office]] (ICO) issued a [[Children's Code|children's code of practice]] for social networking services when used by minors, enforceable under GDPR, which also includes restrictions on "[[Like button|like]]" and "streak" mechanisms in order to discourage [[social media addiction]] and on the use of this data for processing interests.<ref>{{Cite news|url=https://www.bbc.com/news/technology-47933521|title=Under-18s face 'like' and 'streaks' limits|date=15 April 2019|work=BBC News|access-date=15 April 2019|archive-date=15 April 2019|archive-url=https://web.archive.org/web/20190415172531/https://www.bbc.com/news/technology-47933521|url-status=live}}</ref><ref>{{Cite news|last=Greenfield|first=Patrick|url=https://www.theguardian.com/technology/2019/apr/15/facebook-urged-to-ditch-like-feature-in-uk-online-child-safety-drive|title=Facebook urged to disable 'like' feature for child users|date=15 April 2019|work=The Guardian|access-date=15 April 2019|issn=0261-3077|archive-date=15 April 2019|archive-url=https://web.archive.org/web/20190415085023/https://www.theguardian.com/technology/2019/apr/15/facebook-urged-to-ditch-like-feature-in-uk-online-child-safety-drive|url-status=live}}</ref>