Severity: Medium Amendment UK Action required

UK Data Protection Act 2018 amended by Victims and Prisoners Act 2024 affects GDPR implementation

Original title: Victims and Prisoners Act 2024 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

Published
Source: legislation.gov.uk
Effective
Not stated
Deadline
Not stated
Framework: UK GDPR
UK GDPR (as amended to 30 September 2026) source

Why it matters

The Victims and Prisoners Act 2024 brings amendments that impact how the UK GDPR applies, particularly in relation to data subject rights and exemptions. Organizations processing personal data must review their procedures for handling requests from individuals who may fall within the scope of these amendments, as the changes may affect their obligations regarding access rights, data processing, and exemptions previously available under UK GDPR.

What changed

  • Victims and Prisoners Act 2024 modifies the application of UK GDPR provisions, affecting exemptions and data subject rights in specific contexts
  • Changes impact how personal data of victims and prisoners is processed and how data protection rights are applied in these circumstances
  • Organizations must ensure compliance with amended exemptions under Data Protection Act 2018 as modified by the new legislation

Who is affected

All UK organizations processing personal data, particularly those handling data of crime victims or prisoners, and data protection officers responsible for GDPR compliance in the UK

What to do

AI-assisted summary of the official document; the official text prevails. Not legal advice.