Victims and Prisoners Act 2024 modifies UK GDPR derogations and exemptions

Original title: Victims and Prisoners Act 2024 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

The Victims and Prisoners Act 2024 affects the application of the UK GDPR by modifying existing derogations and exemptions. These changes introduce new requirements and clarifications regarding the processing of personal data in the context of victims' rights and prisoner protection. Organizations processing personal data for law enforcement, victim support, or correctional purposes must review their compliance frameworks to accommodate the new legislative requirements introduced by this Act.

What changed

• The Victims and Prisoners Act 2024 introduces modifications to UK GDPR provisions concerning derogations and exemptions that apply to personal data processing related to victims and prisoners.
• Changes affect the scope and applicability of existing GDPR exemptions in contexts involving victim rights protection and prisoner data handling.
• The legislation introduces new or clarified requirements for organizations processing personal data under law enforcement, correctional, or victim support frameworks within the UK.
• Data controllers must reassess their legal basis and compliance mechanisms under UK GDPR following the implementation of this Act.

Who is affected

UK organizations processing personal data related to victims of crime and prisoners, including law enforcement agencies, correctional facilities, victim support services, and data controllers handling sensitive personal data in these contexts

Summary generated by a language model; the official text prevails. Not legal advice.