The Data Protection Act 2018 is the UK implementation of GDPR. Originally created in 1998, DPA was updated in 2018 to reflect modern requirements. As this legislation implements GDPR into UK law, there are some minor deviations from GDRP standards. The key differences are:

· GDRP states the minimum age of consent to data processing is 16. Under DPA, this is 13 in the UK.

· DPA allows for automated decision making and profiling as long as there are legitimate reasons and safeguards in place. Automated decision making is not allowed under GDPR

· DPA provides exclusions from GDPR such as immigration, intelligence, and law enforcement and clarifies the process of data protection in these environments

· Details the role of the Information Commissioners Office (ICO) as the point of authority in the UK

‍