| Act of Parliament | |
 | |
| Long title | An Act to make provision for the regulation of the processing of information relating to individuals; to make provision in connection with the Information Commissioner’s functions under certain regulations relating to information; to make provision for a direct marketing code of practice; and for connected purposes. |
|---|---|
| Citation | 2018 c. 12 |
| Introduced by | Matt Hancock (Commons) Henry Ashton, 4th Baron Ashton of Hyde (Lords) |
| Territorial extent | United Kingdom of Great Britain and Northern Ireland |
| Dates | |
| Royal assent | 23 May 2018 |
| Commencement | May 2018 |
| Other legislation | |
| Repeals/revokes | Data Protection Act 1998 |
| Amended by | Public Services Ombudsman (Wales) Act 2019 Sentencing Act 2020 Armed Forces Act 2021 Advanced Research and Invention Agency Act 2022 Health and Social Care Act 2022 |
| Relates to | General Data Protection Regulation, Data Protection Act 1998 |
Status: Current legislation | |
| History of passage through Parliament | |
| Text of statute as originally enacted | |
| Revised text of statute as amended | |
The Data Protection Act 2018 (c. 12) is a United Kingdom Act of Parliament which updates data protection laws in the UK. It is a national law which complements the European Union's General Data Protection Regulation (GDPR) and replaces the Data Protection Act 1998.
The Act is due to be significantly amended by the Data Protection and Digital Information Bill, which is currently at Committee Stage in the House of Lords.