GDPR in the workplace
The General Data Protection Regulation (GDPR) is a comprehensive data protection law designed to unify and strengthen data privacy protections for individuals within the European Union (EU).
It replaces the 1995 Data Protection Directive and is applicable to all organizations that process the personal data of EU citizens, regardless of their location. This includes the UK even after Brexit as it was kept in our legal framework after we left the EU in the UK GDPR legislation, sitting alongside an amended version of the DPA 2018.