General Data Protection Regulation (GDPR) guidance

Our briefing on GDPR covers the main points of the new regulations and how they might impact on housing associations.

22 October 2018

The General Data Protection Regulations (GDPR), which took effect in May 2018, impose important new duties on holders of data, whether stored electronically or on paper.

This briefing outlines the new requirements and how they are likely to affect housing associations. It also covers the Data Protection Act 2018.

The main points are:

  • GDPR, alongside the Data Protection Act 2018 (DPA) will substantially strengthen previous law governing the storage and use of data
  • GDPR, although an EU instrument, will continue to apply even after the UK leaves the EU
  • Data protection law now applies regardless of the format in which data is stored
  • There are six grounds under which data may lawfully be processed – ‘contract’ and ‘legitimate interests’ are likely to be the most important for housing associations,

Download the briefing