By Jocelyn S Paulley

Most contracts include a definition relating to data protection laws in the UK. This will need to include the Data Protection Act 2018 as well as the GDPR given the important derogations and additional offences in the DPA.

Otherwise, the new law does not affect the mandatory clauses that Article 28 of the GDPR requires that contracts must contain. The DPA also does not amend the GDPR in any way but it does contain exemptions and derogation as permitted by the GDPR.