Data protection, surveillance and monitoring
[page 355]Before the Brexit transition period ended on 31 December 2020, the UK had already incorporated the EU’s General Data Protection Regulation (GDPR) into national law via the Data Protection Act 2018 (DPA 18). The GDPR has been retained by UK law as the “UK GDPR” and will continue to be read alongside the DPA 2018, with technical amendments to ensure it functions in UK law.