Data protection
The Act’s amendments to the UK GDPR and DPA 2018 extend to the whole of the UK, apart from one provision relating to the Information Commission’s seal, which does not extend to Scotland. The data protection legislation amended by this Act applies to data controllers and data processors established in the UK, and those processing on their behalf, and there is some extra-territorial application for certain processing of personal data by controllers and processors established in third countries.