The DPA 2018 supplements the GDPR. It fills in sections of the Regulation that are left to member states’ interpretation and implementation, and clarifies some provisions.
The DPA 2018 also applies “a broadly equivalent regime” – known as “the applied GDPR” – to certain types of processing that fall outside the GDPR’s scope, including by public authorities and sets out data processing regimes for law enforcement and intelligence purposes.
The DPA 2018 and the GDPR should therefore be read together.
