The DPA is the United Kingdom’s data protection legislation. After Brexit, it replaced the GDPR in the UK and largely mirrors its principles. Mobile data processors and controllers operating in the UK must follow the DPA’s requirements to ensure the lawful and secure processing of personal data.
This law can lead to fines in case of non-compliance. For example, the credit reporting agency Equifax was fined of £500,000 over its 2017 data breach by the UK Information Commissioner’s Office.
Complying with the UK’s DPA involves protecting all company smartphones and computers, applications and other places where customer data is stored and accessed.
If your company uses mobile devices, this means using a Mobile Threat Defense solution that will protect smartphones, and other mobile devices from malware, phishing, network exploits. .
For companies that develop and market applications, it means ensuring all applications process data with appropriate safeguards and remediating risky behaviors and vulnerabilities with source code analysis and Compliance Audit.