The DUAA aims to ease compliance burdens, introduce greater flexibility, and provide more practical options for managing data, without undermining the fundamental rights of individuals. In codifying and clarifying certain approaches to data protection compliance, the DUAA may enable employers to more confidently adopt proportionate, risk-based approaches to managing personal data.

Click here for a summary of the key provisions already in force, as well as those expected to come into effect in due course together with an action list for employers. Each change presents an opportunity for employers to streamline processes and enhance internal data handling practices.