Report comment

being an in house lawyer for a public body I have made serious attempts to get to grips with this regulation. it is without doubt one of the most convoluted pieces of legislation about, made much more difficult by the fact that the GDPR is meant to dovetail and be read in conjunction with the Data Protection Act which is not only still only at the Bill stage (so we do not know what the law actually is yet), but is itself full of exemptions and twists and turns. the ICO guidance does little more than point out what the regulations say -which we can read for ourselves, and there is very little in terms of the fine grain detailed guidance that we need. a confused mess