The Data Protection Act (DPA) 2018 is the UK’s data protection law. It brings the EU’s General Data Protection Regulation (GDPR) into the UKs legal system. The DPA 2018 features extra requirements and exemptions, especially around specific types of data and processing purposes such as crime data and national security purposes. As the UK prepares to leave the EU, it faces the prospect of being subject to a second UK-GDPR, and preparing for potential changes post-Brexit.”]