Legal entities
In addition to the material scope of the GDPR, the DPA applies to the processing of information about a legal entity and will be subject to the Data Protection Act if it is carried out (Section 2(2)):
(i) for or on behalf of a credit information agency; or
(ii) with the purpose of warning others against entering into a business or employment relationship with the legal entity.
Deceased persons
According to Section 2(5) of the DPA, the provisions of the Act and of the GDPR shall apply to the data of deceased persons for a period of ten (10) years following the death.
