Act of Parliament in the United Kingdom

Running head: CRIMINAL LAW
CRIMINAL LAW
Name of the Student
Name of the University
Author Note

CRIMINAL LAW1
Section A
The Data Protection Act (DPA) is an Act of Parliament in the United Kingdom and it had
been passed in the year 1998. The Data Protection Act is considered to be developed in order to
govern or regulate how any personal information or customer information would be used by any
of the government bodies or the organizations. In addition to such, it also protects the people or
the individuals and lays down certain rules regarding how any data about the individuals can be
used. This particular Act is considered to be applicable to the information or the data that can be
stockpiled or put away in a computer or in any organized paper filing system that would be on
the subject of the living people. The Data Protection Act is considered to be significant as it
provides a certain kind of guidance regarding the rules for the organizations. Along with such it
also empowers the government to follow any personal data that can be used which would involve
regulation of any processing of the personal data (Calder 2018). There are a few differences that
around the notification in the DPA as well as the GDPR.
1. It helps in protecting the rights relating to the data subject and along with such it also
tries to enable the Data Protection Authority or the ICO in order to enforce the rules.
Whereas, on the other hand, GDPR is a European Privacy Law and it increases the
restrictions on the organization.
2. In addition to this, it tries to hold the organizations responsible or liable to fines in the
event relating to the breach of certain rules. Similarly, GDPR on the other hand tries to
provide awareness to the individuals.
3. There are few differences between the GDPR and the DPA as the GDPR is considered to
be a regulation which is applicable directly under the UK law without any kind of
domestic legislation. DPA on the other hand, is considered to be under the domestic law

CRIMINAL LAW2
therefore, such would be applicable as long as the UK Parliament allows it. Furthermore,
it would also be subjected to repeals or amendments.
4. The organizations in the DPA are obligated to register or notify the ICO, which is the
Information Commissioner’s Office through certain online questionnaire, and after such
the fees are to be paid (Woods 2017). In the case of GDPR, they are considered to
provide a notification before any processing by the Data Controller if such has been
removed.
5. The Data Controllers are considered to be under criteria that are more rigorous. It can
also be understood that the Notification in order to carry out all the data was needed in
order to process the personal data. On the other hand, the data processing in the GDPR is
considered to legally occur only after any of the organization have examined or evaluated
the impact regarding the processing of the data on the Data Subject. Along with such the
security measures would also help to protect the data and try to use appropriate and
current technical as well as organizational procedures which were considered to be in
place (Addis and Kutar 2018).
Source: data protection act images1998 logo - Google Search. (2020). Retrieved 20 March 2020
(2020). Retrieved 20 March 2020,