UK GDPR & Data Protection Act 2018 (DPA 2018)
The UK's post-Brexit data protection framework, mirroring EU GDPR principles while operating under separate national enforcement.
Related terms
Data Protection
Not just a technical outcome — under laws like GDPR, "data protection" is a legal process with specific paperwork, and skipping it is a violation even if nothing ever leaks.
GDPR (General Data Protection Regulation)
The fine print people usually miss: it's up to 4% of global revenue or €20M, whichever is greater — and for a large company, that "or greater" clause matters a lot.
UK GDPR & Data Protection Act (DPA) 2018
They started as the same document. They're no longer guaranteed to stay that way — and "we're GDPR compliant" is quietly becoming two separate claims instead of one.
Unauthorized Data Access
Most unauthorized access to sensitive data through AI doesn't involve a hacker at all — it involves someone with a perfectly valid login, asking an AI tool a question it shouldn't have been able to answer.
Unstructured Data
The database is encrypted, access-controlled, and audited. The same customer's data, sitting in a support email thread three systems away, usually isn't — and that's exactly the content AI tools are built to read.
See UK GDPR & Data Protection Act 2018 (DPA 2018) in practice
Questa AI anonymizes sensitive data before it reaches any AI model — across documents and live prompts, with governance and data-residency control.