What Changes for UK Data Protection Legislation GDPR and the Data Protection Act 2018
While both the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA) are similar in nature, the DPA 2018 covers areas that are not covered by the GDPR and deals with "the processing of personal data by certain authorities for law enforcement purposes by bringing the Police and Criminal Justice Directive (Law Enforcement Directive or LED) into UK law".
It also applies an updated form of the GDPR to processing that is outside both the LED and GDPR and aims to ensure that the UK would be able to exchange freely data with the European Union after Brexit. Five features of the DPA 2018 are different than the 1998 regulations. These include: An increased consent requirement, the right to erasure, children's data, the right to data portability and automated decision-making and profiling".