Unit 1.8 differences and similarities

Unit 1.8 differences and similarities

1. DPA

   • Only applies to the UK
   • Enforced by the Information Commissioner's Office
   • Fines upto £500,000
   • No requirement to remove all data
   • Data collection does not require an opt-in under the current data protection act

2. GDPR

   • Applies to the whole of the EU
   • Fines upto 20 million euros
   • Requires to nominate a data controller if you have more than 250 employees
   • A protection impact assessment is necessary (PIA)