The Data Protection Act 2018, which is the UK's third generation of data protection law, has now received the Royal Assent and its main provisions will commence on 25th May 2018. The new Act is aimed at modernising data protection laws to ensure they are effective in the years to come and will be considered alongside GDPR which gives EU member states limited opportunities to make provisions for how it applies in their country. One key element of the DPA 2018 is the details of these provisions.