The LAA has amended all current contracts in order to meet the requirements imposed by the General Data Protection Regulation (Regulation (EU) 2016/679) and the Law Enforcement Directive (Directive (EU) 2016/680), being implemented under Part 3 of the Data Protection bill. Amendments regarding the GDPR apply from 25 May 2018. Amendments relating to the Directive apply from 6 May 2018.
There are some detailed obligations. The LAA require you to notify them within 5 business days if you receive the following in relation to LAA or shared data:
- A data subject request
- A request to rectify, block or erase personal data
- A complaint or other communication about your (or the LAA’s) handling of data
- A communication from the Information Commissioner
You must also indemnify the LAA if it is fined because you fail to comply with the legislation.
You can find more information here.
Legal Aid Handbook 