Source: http://www.legislation.gov.uk/ukpga/1998/29/data.htm?wrap=true
Timestamp: 2019-10-19 18:18:55
Document Index: 464642648

Matched Legal Cases: ['art. 7', 'art. 6', 'art. 8', 'art. 1', 'art. 11', 'art. 1', 'art. 5', 'art. 1', 'art 1']

Changes over time for: Data Protection Act 1998
14/05/2001- Amendment
09/07/2003- Amendment
30/11/2005- Amendment
19/05/2008- Amendment
29/05/2008- Amendment
10/09/2012- Amendment
10/03/2015- Amendment
06/06/2016- Amendment
22/07/2016- Amendment
Data Protection Act 1998 is up to date with all changes known to be in force on or before 19 October 2019. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
F1Data Protection Act 1998
C1Act modified (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 432 (with ss. 117, 209, 210, Sch. 20 paras. 58, 59); S.I. 2018/625, reg. 2(1)(g)
C2Act: power to amend conferred (8.5.2008) by virtue of Criminal Justice and Immigration Act 2008 (c. 4), ss. 77(5), 153
Act: Crown status for the purposes of the Act extended (6.5.1999) by S.I. 1999/677, art. 7(3)
Act (except ss. 6(4)(a)(b), 28, Sch. 5 para. 12(2) for certain purposes and Sch. 6 paras. 2, 3): functions of the Lord Chancellor transferred to the Secretary of State, and all property, rights and liabilities to which the Lord Chancellor is entitled or subject to in connection with any such function transferred to the Secretary of State for Constitutional Affairs (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), arts. 4, 5, Sch. 1 (with art. 6)
Act restricted by The Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003 (S.I. 2003/2818), art. 8(2) (the amendment coming into force in accordance with art. 1(2) of the amending S.I.)
Act modified by The Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003 (S.I. 2003/2818), art. 11(4) (the amendment coming into force in accordance with art. 1(2) of the amending S.I.)
Act modified by The National Assembly for Wales Commission (Crown Status) Order 2007 (S.I. 2007/1118), art. 5 (the amendment coming into force in accordance with art. 1(2) of the amending S.I.)
Act excluded (3.12.2014) by The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141), regs. 1(b), 50(1)
Act applied (N.I.) (12.4.2016) by Health and Social Care (Control of Data Processing) Act (Northern Ireland) 2016 (c. 12), s. 1(8)
Act applied (S.) (1.4.2018) by The National Health Service (General Medical Services Contracts) (Scotland) Regulations 2018 (S.S.I. 2018/66), reg. 1, sch. 6 para. 64 (with reg. 2)
C3Act applied in part (with modifications) in so far as still in force by S.I. 2003/2426, Sch. 1 para. 8AA (as amended) (17.12.2018) by The Privacy and Electronic Communications (Amendment) Regulations 2018 (S.I. 2018/1189), regs. 1, 2(2)(3)
F1Part IU.K. Preliminary
1 Basic interpretative provisions.U.K.
2 Sensitive personal data.U.K.
3 The special purposes.U.K.
4 The data protection principles.U.K.
5 Application of Act.U.K.
6 The Commissioner . . . .U.K.
F1Part IIU.K. Rights of data subjects and others
7 Right of access to personal data.U.K.
8 Provisions supplementary to section 7.U.K.
9 Application of section 7 where data controller is credit reference agency.U.K.
9A Unstructured personal data held by public authorities.U.K.
10 Right to prevent processing likely to cause damage or distress.U.K.
11 Right to prevent processing for purposes of direct marketing.U.K.
12 Rights in relation to automated decision-taking.U.K.
12A Rights of data subjects in relation to exempt manual data.U.K.
13 Compensation for failure to comply with certain requirements.U.K.
14 Rectification, blocking, erasure and destruction.U.K.
15 Jurisdiction and procedure.U.K.
F1Part IIIU.K. Notification by data controllers
16 Preliminary.U.K.
17 Prohibition on processing without registration.U.K.
18 Notification by data controllers.U.K.
19 Register of notifications.U.K.
20 Duty to notify changes.U.K.
21 Offences.U.K.
22 Preliminary assessment by Commissioner.U.K.
23 Power to make provision for appointment of data protection supervisors.U.K.
24 Duty of certain data controllers to make certain information available.U.K.
25 Functions of Commissioner in relation to making of notification regulations.U.K.
26 Fees regulations.U.K.
F1Part IVU.K. Exemptions
27 Preliminary.U.K.
28 National security.U.K.
29 Crime and taxation.U.K.
30 Health, education and social work.U.K.
31 Regulatory activity.U.K.
32 Journalism, literature and art.U.K.
33 Research, history and statistics.U.K.
33A Manual data held by public authorities.U.K.
34 Information available to the public by or under enactment.U.K.
35 Disclosures required by law or made in connection with legal proceedings etc.U.K.
35A Parliamentary privilege.U.K.
36 Domestic purposes.U.K.
37 Miscellaneous exemptions.U.K.
38 Powers to make further exemptions by order.U.K.
39 Transitional relief.U.K.
F1 Part VU.K. Enforcement
40 Enforcement notices.U.K.
41 Cancellation of enforcement notice.U.K.
41AAssessment noticesU.K.
41BAssessment notices: limitationsU.K.
41CCode of practice about assessment noticesU.K.
42 Request for assessment.U.K.
43 Information notices.U.K.
44 Special information notices.U.K.
45 Determination by Commissioner as to the special purposes.U.K.
46 Restriction on enforcement in case of processing for the special purposes.U.K.
47 Failure to comply with notice.U.K.
48 Rights of appeal.U.K.
49 Determination of appeals.U.K.
50 Powers of entry and inspection.U.K.
Part VIU.K. Miscellaneous and General
C4Pt. VI applied (with modifications) (3.12.2014) by The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141), regs. 1(b), 51(1)(b)
F1 Functions of CommissionerU.K.
51 General duties of Commissioner.U.K.
52 Reports and codes of practice to be laid before Parliament.U.K.
52AData-sharing codeU.K.
52AADirect marketing codeU.K.
52B data-sharing and direct marketing codes: procedureU.K.
52CAlteration or replacement of data-sharing and direct marketing codes U.K.
52DPublication of data-sharing and direct marketing codes U.K.
52EEffect of data-sharing and direct marketing codes U.K.
53 Assistance by Commissioner in cases involving processing for the special purposes.U.K.
54 International co-operation.U.K.
54AInspection of overseas information systemsU.K.
F1 Unlawful obtaining et ceteralaetc. of personal dataU.K.
55 Unlawful obtaining etc. of personal data.U.K.
F1Monetary penaltiesU.K.
55APower of Commissioner to impose monetary penaltyU.K.
55BMonetary penalty notices: procedural rightsU.K.
55CGuidance about monetary penalty noticesU.K.
55DMonetary penalty notices: enforcementU.K.
55ENotices under sections 55A and 55B: supplementalU.K.
F1 Records obtained under data subject’s right of accessU.K.
56 Prohibition of requirement as to production of certain records.U.K.
57 Avoidance of certain contractual terms relating to health records.U.K.
F1 Information provided to Commissioner or TribunalU.K.
58 Disclosure of information.U.K.
59 Confidentiality of information.U.K.
F1 General provisions relating to offencesU.K.
60 Prosecutions and penalties.U.K.
61 Liability of directors etc.U.K.
Amendments of Consumer Credit Act 1974U.K.
62 Amendments of Consumer Credit Act 1974.U.K.
(1)In section 158 of the M1Consumer Credit Act 1974 (duty of agency to disclose filed information)—
(i)in paragraph (a) for “individual” there is substituted “ partnership or other unincorporated body of persons not consisting entirely of bodies corporate ”, and
(ii)for “him” there is substituted “ it ”,
(b)in subsection (2), for “his” there is substituted “ the consumer’s ”, and
(c)in subsection (3), for “him” there is substituted “ the consumer ”.
(a)for “consumer”, wherever occurring, there is substituted “ objector ”, and
(b)for “Director”, wherever occurring, there is substituted “ the relevant authority ”.
(i)for “him” there is substituted “ to the consumer ”, and
(ii)in paragraphs (a) and (b) for “he” there is substituted “ the consumer ” and for “his” there is substituted “ the consumer’s ”, and
F1 GeneralU.K.
63 Application to Crown.U.K.
63A Application to Parliament.U.K.
64 Transmission of notices etc. by electronic or other means.U.K.
65 Service of notices by Commissioner.U.K.
66 Exercise of rights in Scotland by children.U.K.
67 Orders, regulations and rules.U.K.
68 Meaning of “accessible record”.U.K.
69 Meaning of “health professional”.U.K.
70 Supplementary definitions.U.K.
71 Index of defined expressions.U.K.
72 Modifications of Act.U.K.
73 Transitional provisions and savings.U.K.
74 Minor and consequential amendments and repeals and revocations.U.K.
75 Short title, commencement and extent.U.K.
Section 4(1) and (2).
F1SCHEDULE 1U.K. The data protection principles
F1SCHEDULE 2U.K. Conditions relevant for purposes of the first principle: processing of any personal data
F1SCHEDULE 3U.K. Conditions relevant for purposes of the first principle: processing of sensitive personal data
F1SCHEDULE 4U.K. Cases where the eighth principle does not apply
F1SCHEDULE 5U.K. The Data Protection Commissioner . . .
Sections 28(12), 48(5).
F1 SCHEDULE 6U.K. Appeal proceedings
F1SCHEDULE 7U.K. Miscellaneous exemptions
F1SCHEDULE 8U.K. Transitional relief
F1 SCHEDULE 9U.K. Powers of entry and inspection
F1SCHEDULE 10U.K. Further provisions relating to assistance under section 53
Section 68(1)(6).
F1SCHEDULE 11U.K. Educational records
Section 68(1)(c).
F1SCHEDULE 12U.K. Accessible public records
F1SCHEDULE 13U.K. Modifications of Act having effect before 24th October 2007
F1SCHEDULE 14U.K. Transitional provisions and savings
SCHEDULE 15U.K. Minor and consequential amendments
F1Public Records Act 1958 (c. 51)U.K.
F1Parliamentary Commissioner Act 1967 (c. 13)U.K.
F1Superannuation Act 1972 (c. 11)U.K.
F1House of Commons Disqualification Act 1975 (c. 24)U.K.
F1Northern Ireland Assembly Disqualification Act 1975 (c. 25)U.K.
F1Representation of the People Act 1983 (c. 2)U.K.
F1 Access to Medical Reports Act 1988 (c. 28)U.K.
F1Football Spectators Act 1989 (c. 37)U.K.
F1Education (Student Loans) Act 1990 (c. 6)U.K.
F1Access to Health Records Act 1990 (c. 23)U.K.
13In section 5(3) of that Act (cases where right of access may be partially excluded) for the words from the beginning to “record” in the first place where it occurs there is substituted “ Access shall not be given under section 3(2) to any part of a health record ”.
F1Access to Personal Files and Medical Reports (Northern Ireland) Order 1991 (1991/1707 (N.I. 14))U.K.
15In Article 6(1) of that Order (interpretation), in the definition of “health professional”, for “the Data Protection (Subject Access Modification) (Health) Order 1987” there is substituted “ the Data Protection Act 1998 ”.
Tribunals and Inquiries Act 1992 (c. 53)U.K.
16In Part 1 of Schedule 1 to the Tribunals and Inquiries Act 1992 (tribunals under direct supervision of Council on Tribunals), for paragraph 14 there is substituted—
F1Access to Health Records (Northern Ireland) Order 1993 (1993/1250 (N.I. 4))U.K.
18In Article 5(4) of that Order (cases where fee may be required) in sub-paragraph (a), for “the maximum prescribed under section 21 of the Data Protection Act 1984” there is substituted “ such maximum as may be prescribed for the purposes of this Article by regulations under section 7 of the Data Protection Act 1998 ”.
F1SCHEDULE 16U.K. Repeals and revocations