Source: http://smartleges.com/es/biblioteca-de-leyes/1998-c-29-data-protection-act-1998/2002531
Timestamp: 2018-04-26 21:33:45
Document Index: 137714514

Matched Legal Cases: ['art. 2', 'art. 2', 'art. 2', 'art. 2', 'art. 2', 'art. 2', 'art. 2', 'art. 2', 'art. 2', 'art. 2', 'art. 2', 'art. 2', 'art. 2', 'art. 9', 'art. 2', 'art. 2', 'art. 7', 'art. 3', 'art. 7', 'art. 2', 'art. 2', 'art. 2', 'art. 9', 'art. 7', 'art. 7', 'art. 6', 'art. 2', 'art. 3', 'art. 5', 'art. 8', 'art. 7', 'art. 9', 'art. 9', 'art. 2', 'art. 2', 'art. 9', 'art. 9', 'art. 9']

Data Protection Act 1998, 1998 c. 29, Version 01/04/2006
Functions of CommissionerF62
Monetary penaltiesF70 ] (P)
(1) In this Act, unless the context otherwise requires— “data” means information which— (a) is being processed by means of equipment operating automatically in response to instructions given for that purpose, (b) is recorded with the intention that it should be processed by means of such equipment, (c) is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system, F1 . . . (d) does not fall within paragraph (a) , (b) or (c) but forms part of an accessible record as defined by section 68; [F2 or (e) is recorded information held by a public authority and does not fall within any of paragraphs (a) to (d) ;] “data controller” means, subject to subsection (4) , a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed; “data processor”, in relation to personal data, means any person (other than an employee of the data controller) who processes the data on behalf of the data controller; “data subject” means an individual who is the subject of personal data; “personal data” means data which relate to a living individual who can be identified— (a) from those data, or (b) from those data and other information which is in the possession of, or is likely to come into the possession of, the data controller, and includes any expression of opinion about the individual and any indication of the intentions of the data controller or any other person in respect of the individual; “processing”, in relation to information or data, means obtaining, recording or holding the information or data or carrying out any operation or set of operations on the information or data, including— (a) organisation, adaptation or alteration of the information or data, (b) retrieval, consultation or use of the information or data, (c) disclosure of the information or data by transmission, dissemination or otherwise making available, or (d) alignment, combination, blocking, erasure or destruction of the information or data; [F3 “public authority” means a public authority as defined by the Freedom of Information Act 2000 or a Scottish public authority as defined by the Freedom of Information (Scotland) Act 2002;] “relevant filing system” means any set of information relating to individuals to the extent that, although the information is not processed by means of equipment operating automatically in response to instructions given for that purpose, the set is structured, either by reference to individuals or by reference to criteria relating to individuals, in such a way that specific information relating to a particular individual is readily accessible.
[F4 (5) In paragraph (e) of the definition of “data” in subsection (1) , the reference to information “held” by a public authority shall be construed in accordance with section 3(2) of the Freedom of Information Act 2000 [F5 or section 3(2) , (4) and (5) of the Freedom of Information (Scotland) Act 2002.]
[F6 (a) ] section 7 of the Freedom of Information Act 2000 prevents Parts I to V of that Act[F7 or]
[F7 (b) section 7(1) of the Freedom of Information (Scotland) Act 2002 prevents that Act,]
from applying to certain information held by a public authority, that information is not to be treated for the purposes of paragraph (e) of the definition of “data” in subsection (1) as held by a public authority.]
F1 In s. 1(1) in definition of "data" word repealed (1.1.2005) by 2000 c. 36, ss. 68(2)(a), 86, 87(3), Sch. 8 Pt. III (with ss. 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2
F2 In s. 1(1) in definition of "data" paragraph (e) and preceding word inserted (1.1.2005) by 2000 c. 36, ss. 68(2)(a), 87(3) (with ss. 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2
F3 In s. 1(1) definition of "public authority" inserted (1.1.2005) by 2000 c. 36, ss. 68(2)(b), 87(3) (with ss. 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2; and this same definition substituted (1.1.2005) by The Freedom of Information (Scotland) Act 2002 (Consequential Modifications) Order 2004 (S.I. 2004/3089), art. 2(2)(a)
F4 S. 1(5)(6) inserted (1.1.2005) by 2000 c. 36, ss. 68(3), 87(3) (with ss. 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2
F5 Words in s. 1(5) inserted (1.1.2005) by The Freedom of Information (Scotland) Act 2002 (Consequential Modifications) Order 2004 (S.I. 2004/3089), art. 2(2)(b)
F6 Words in s. 1(6) renumbered (1.1.2005) as s. 1(6)(a) by The Freedom of Information (Scotland) Act 2002 (Consequential Modifications) Order 2004 (S.I. 2004/3089), art. 2(2)(c)
F7 S. 1(6)(b) and preceding word inserted (1.1.2005) by The Freedom of Information (Scotland) Act 2002 (Consequential Modifications) Order 2004 (S.I. 2004/3089), art. 2(2)(c)
[F8 (1) For the purposes of this Act and of the Freedom of Information Act 2000 there shall be an officer known as the Information Commissioner (in this Act referred to as “the Commissioner”).]
[F9 (3) For the purposes of this Act and of the Freedom of Information Act 2000 there shall be a tribunal known as the Information Tribunal (in this Act referred to as “the Tribunal”).]
(c) such number of other members appointed by the [F10 Secretary of State] F10 as he may determine.
(a) persons who have a 7 year general qualification, within the meaning of section 71 of the M2 Courts and Legal Services Act 1990,
(a) persons to represent the interests of data subjects,
[F11 (aa) persons to represent the interests of those who make requests for information under the Freedom of Information Act 2000,]
(b) persons to represent the interests of data controllers [F12 and
(bb) persons to represent the interests of public authorities.]
F8 S. 6(1) substituted (30.1.2001) by 2000 c. 36, ss. 18(4), 87(2)(c), Sch. 2 Pt. I para. 13(2) (with ss. 7(1)(7), 56, 78)
F9 S. 6(3) substituted (14.5.2001) by 2000 c. 36, s. 18(2), Sch. 2 Pt. I para. 13(3) (with ss. 7(1)(7), 56, 78); S.I. 2001/1637, art. 2(b)
F10 Words in s. 6(4)(c) substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)
F11 S. 6(6)(aa) substituted for word in s. 6(6)(a) (14.5.2001) by 2000 c. 36, s. 18(4), Sch. 2 Pt. II para. 16(a) (with ss. 7(1)(7), 56, 78); S.I. 2001/1637, art. 2(b)
F12 S. 6(6)(bb) and the preceding word inserted (14.5.2001) by 2000 c. 36, s. 18(4), Sch. 2 Pt. II para. 16(b) (with ss. 7(1)(7), 56, 78); S.I. 2001/1637, art. 2(b)
C5 S. 6(4)(a)(b): transfer of certain functions (1.7.1999) by 1999/1750, arts. 1, 2, Sch. 1 (with art. 7); S.I. 1998/3178, art. 3
C6 S. 6(4)(a): functions of the Lord Advocate transferred to the Secretary of State, and all property, rights and liabilities to which the Lord Advocate is entitled or subject in connection with any such function transferred to the Secretary of State for Scotland (19.5.1999) by S.I. 1999/678, arts. 2, 3, Sch. (with art. 7)
M2 1990 c. 41.
(1) Subject to the following provisions of this section and to [F13 sections 8, 9 and 9A] , an individual is entitled—
[F14 (3) Where a data controller—
(a) reasonably requires further information in order to satisfy himself as to the identity of the person making a request under this section and to locate the information which that person seeks, and
(b) has informed him of that requirement,
the data controller is not obliged to comply with the request unless he is supplied with that further information.]
(10) In this section— “prescribed” means prescribed by the [F15 Secretary of State] F15 by regulations; “the prescribed maximum” means such amount as may be prescribed; “the prescribed period” means forty days or such other period as may be prescribed; “the relevant day”, in relation to a request under this section, means the day on which the data controller receives the request or, if later, the first day on which the data controller has both the required fee and the information referred to in subsection (3).
[F16 (12) A person is a relevant person for the purposes of subsection (4) (c) if he—
[F17 (12) A person is a relevant person for the purposes of subsection (4) (c) if he—
F13 Words in s. 7(1) substituted (30.11.2000 for certain purposes and otherwise 1.1.2005) by 2000 c. 36, ss. 69(1), 87(1)(3) (with ss. 7(1)(7), 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2
F14 S. 7(3) substituted (14.5.2001) by 2000 c. 36, s. 73, Sch. 6 para. 1 (with ss. 56, 78); S.I. 2001/1637, art. 2(d)
F15 Words in s. 7 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)
F16 S. 7(12) inserted after s. 7(11) (1.3.2000) by virtue of S.I. 2000/414, art. 7(2)
F17 S. 7(12) inserted (1.3.2000) by S.I. 2000/415, art. 7(2)
S. 7 modified (1.3.2000) by S.I. 2000/415, art. 6
C8 S. 7 excluded (1.3.2000) by The Data Protection (Miscellaneous Subject Access Exemptions) Order 2000 (S.I. 2000/419), art. 2 Sch. (as amended (1.10.2009) by S.I. 2009/1892, art. 3, Sch. 3 para. 1)
C9 S. 7(1) extended (1.3.2000) by S.I. 2000/191, reg. 2(2)
C10 S. 7(1)(a)(b)(c) extended (1.3.2000) by S.I. 2000/191, reg. 2(1)
C11 S. 7(1)(b)-(d) excluded (1.3.2000) by S.I. 2000/415, art. 5(1)
C12 S. 7(4)(9) modified (1.3.2000) by S.I. 2000/413, art. 8(a)(b)
S. 7(4)(9) modified (1.3.2000) by S.I. 2000/415, art. 7(1)(a)(b)
(1) The [F18 Secretary of State] F18 may by regulations provide that, in such cases as may be prescribed, a request for information under any provision of subsection (1) of section 7 is to be treated as extending also to information under other provisions of that subsection.
F18 Words in s. 8 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)
(3) Where the data controller receives a request under section 7 in a case where personal data of which the individual making the request is the data subject are being processed by or on behalf of the data controller, the obligation to supply information under that section includes an obligation to give the individual making the request a statement, in such form as may be prescribed by the [F19 Secretary of State] F19 by regulations, of the individual’s rights—
(a) under section 159 of the M3 Consumer Credit Act 1974 , and
F19 Words in s. 9 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)
M3 1974 c. 39.
[F20 9A Unstructured personal data held by public authorities.
(5) In subsections (3) and (4) “the appropriate limit” means such amount as may be prescribed by the [F21 Secretary of State] by regulations, and different amounts may be prescribed in relation to different cases.
F20 S. 9A inserted (30.11.2000 for certain purposes and otherwise 1.1.2005) by 2000 c. 36, ss. 69(2), 87(1)(3) (with ss. 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2 (s. 69(2) of the amending Act was itself amended (19.8.2003) by S.I. 2003/1887, art. 9, Sch. 2 para. 12(1)(b))
F21 Words in s. 9A substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 paras. 9(1)(a), 12(1)(b)
(b) in such other cases as may be prescribed by the [F22 Secretary of State] F22 by order.
F22 Words in s. 10 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)
[F23 (2A) This section shall not apply in relation to the processing of such data as are mentioned in paragraph (1) of regulation 8 of the Telecommunications (Data Protection and Privacy) Regulations 1999 (processing of telecommunications billing data for certain marketing purposes) for the purposes mentioned in paragraph (2) of that regulation.]
F23 S. 11(2A) inserted (1.3.2000) by S.I. 1999/2093, reg. 3(3), Sch. 1 Pt. II para. 3