What is changing, what this means, and what organizations should be doing now.
Data Protection Act 2018
Lack of adequate policies and procedures cited as reasons for failure to prevent the release of sensitive personal information to a third party.