The LAA has amended all current contracts in order to meet the requirements imposed by the General Data Protection Regulation (Regulation (EU) 2016/679) and the Law Enforcement Directive (Directive (EU) 2016/680), being implemented under Part 3 of the Data Protection bill. Amendments regarding the GDPR apply from 25 May 2018. Amendments relating to the Directive apply from 6 May 2018.
There are some detailed obligations. The LAA require you to notify them within 5 business days if you receive the following in relation to LAA or shared data:
- A data subject request
- A request to rectify, block or erase personal data
- A complaint or other communication about your (or the LAA’s) handling of data
- A communication from the Information Commissioner
You must also indemnify the LAA if it is fined because you fail to comply with the legislation.
You can find more information here.