The Data Protection Act 2018 does not replace GDPR. It came into effect on the 25th of May 2018, alongside the GDPR. The DPA is designed to be specific to the UK, as opposed to the wider-reaching scope of the GDPR, and contains some of the finer details of how GDPR will be implemented in the UK. Among these are an increase in the powers of the Information Commissioner’s Office, stipulations for the processing of data belonging to immigrants, and rules for law enforcement processing (as covered in this course).