Source: http://www.legislation.gov.uk/ukpga/2018/12/contents
Timestamp: 2019-10-23 14:00:35
Document Index: 239643151

Matched Legal Cases: ['art 6', 'art\n5', 'art 2', 'ART 2', 'art 2', 'art 2', 'arts 3', 'art 1', 'art 1', 'art 42', 'art 42', 'art 1', 'art 8', 'art 3', 'art 4', 'art 3']

Data Protection Act 2018 is up to date with all changes known to be in force on or before 23 October 2019. There are changes that may be brought into force at a future date.
3.Terms relating to the processing of personal data
4.Processing to which this Part applies
CHAPTER 2 The GDPR
Meaning of certain terms used in the GDPR
6.Meaning of “controller”
7.Meaning of “public authority” and “public body”
8.Lawfulness of processing: public interest etc
9.Child's consent in relation to information society services
10.Special categories of personal data and criminal convictions etc data
11.Special categories of personal data etc: supplementary
12.Limits on fees that may be charged by controllers
13.Obligations of credit reference agencies
14.Automated decision-making authorised by law: safeguards
15.Exemptions etc
16.Power to make further exemptions etc by regulations
Accreditation of certification providers
17.Accreditation of certification providers
Transfers of personal data to third countries etc
18.Transfers of personal data to third countries etc
19.Processing for archiving, research and statistical purposes: safeguards
20.Meaning of “court”
21.Processing to which this Chapter applies
22.Application of the GDPR to processing to which this Chapter applies
23.Power to make provision in consequence of regulations related to the GDPR
24.Manual unstructured data held by FOI public authorities
25.Manual unstructured data used in longstanding historical research
26.National security and defence exemption
27.National security: certificate
28.National security and defence: modifications to Articles 9 and 32 of the applied GDPR
29.Processing to which this Part applies
30.Meaning of “competent authority”
31.“The law enforcement purposes”
32.Meaning of “controller” and “processor”
33.Other definitions
34.Overview and general duty of controller
35.The first data protection principle
36.The second data protection principle
37.The third data protection principle
38.The fourth data protection principle
39.The fifth data protection principle
40.The sixth data protection principle
41.Safeguards: archiving
42.Safeguards: sensitive processing
43.Overview and scope
Information: controller's general duties
44.Information: controller's general duties
Data subject's right of access
45.Right of access by the data subject
Data subject's rights to rectification or erasure etc
46.Right to rectification
47.Right to erasure or restriction of processing
48.Rights under section 46 or 47: supplementary
49.Right not to be subject to automated decision-making
50.Automated decision-making authorised by law: safeguards
51.Exercise of rights through the Commissioner
52.Form of provision of information etc
53.Manifestly unfounded or excessive requests by the data subject
54.Meaning of “applicable time period”
55.Overview and scope
56.General obligations of the controller
57.Data protection by design and default
58.Joint controllers
59.Processors
60.Processing under the authority of the controller or processor
61.Records of processing activities
62.Logging
63.Co-operation with the Commissioner
64.Data protection impact assessment
65.Prior consultation with the Commissioner
Obligations relating to security
66.Security of processing
Obligations relating to personal data breaches
67.Notification of a personal data breach to the Commissioner
68.Communication of a personal data breach to the data subject
69.Designation of a data protection officer
70.Position of data protection officer
71.Tasks of data protection officer
CHAPTER 5 Transfers of personal data to third countries etc
72.Overview and interpretation
General principles for transfers
73.General principles for transfers of personal data
74.Transfers on the basis of an adequacy decision
75.Transfers on the basis of appropriate safeguards
76.Transfers on the basis of special circumstances
77.Transfers of personal data to persons other than relevant authorities
78.Subsequent transfers
79.National security: certificate
80.Special processing restrictions
81.Reporting of infringements
82.Processing to which this Part applies
83.Meaning of “controller” and “processor”
84.Other definitions
85.Overview
86.The first data protection principle
87.The second data protection principle
88.The third data protection principle
89.The fourth data protection principle
90.The fifth data protection principle
91.The sixth data protection principle
92.Overview
93.Right to information
94.Right of access
95.Right of access: supplementary
96.Right not to be subject to automated decision-making
97.Right to intervene in automated decision-making
98.Right to information about decision-making
99.Right to object to processing
100.Rights to rectification and erasure
101.Overview
102.General obligations of the controller
103.Data protection by design
104.Joint controllers
105.Processors
106.Processing under the authority of the controller or processor
107.Security of processing
108.Communication of a personal data breach
CHAPTER 5 Transfers of personal data outside the United Kingdom
109.Transfers of personal data outside the United Kingdom
110.National security
111.National security: certificate
112.Other exemptions
113.Power to make further exemptions
114.The Information Commissioner
115.General functions under the GDPR and safeguards
116.Other general functions
117.Competence in relation to courts etc
118.Co-operation and mutual assistance
119.Inspection of personal data in accordance with international obligations
120.Further international role
121.Data-sharing code
122.Direct marketing code
123.Age-appropriate design code
124.Data protection and journalism code
125.Approval of codes prepared under sections 121 to 124
126.Publication and review of codes issued under section 125(4)
127.Effect of codes issued under section 125(4)
128.Other codes of practice
Consensual audits
129.Consensual audits
Records of national security certificates
130.Records of national security certificates
Information provided to the Commissioner
131.Disclosure of information to the Commissioner
132.Confidentiality of information
133.Guidance about privileged communications
134.Fees for services
135.Manifestly unfounded or excessive requests by data subjects etc
136.Guidance about fees
137.Charges payable to the Commissioner by controllers
138.Regulations under section 137: supplementary
139.Reporting to Parliament
140.Publication by the Commissioner
141.Notices from the Commissioner
142.Information notices
143.Information notices: restrictions
144.False statements made in response to information notices
145.Information orders
146.Assessment notices
147.Assessment notices: restrictions
Information notices and assessment notices: destruction of documents etc
148.Destroying or falsifying information and documents etc
149.Enforcement notices
150.Enforcement notices: supplementary
151.Enforcement notices: rectification and erasure of personal data etc
152.Enforcement notices: restrictions
153.Enforcement notices: cancellation and variation
154.Powers of entry and inspection
155.Penalty notices
156.Penalty notices: restrictions
157.Maximum amount of penalty
158.Fixed penalties for non-compliance with charges regulations
159.Amount of penalties: supplementary
160.Guidance about regulatory action
161.Approval of first guidance about regulatory action
Appeals etc
162.Rights of appeal
163.Determination of appeals
164.Applications in respect of urgent notices
165.Complaints by data subjects
166.Orders to progress complaints
167.Compliance orders
168.Compensation for contravention of the GDPR
169.Compensation for contravention of other data protection legislation
170.Unlawful obtaining etc of personal data
171.Re-identification of de-identified personal data
172.Re-identification: effectiveness testing conditions
173.Alteration etc of personal data to prevent disclosure to data subject
174.The special purposes
175.Provision of assistance in special purposes proceedings
176.Staying special purposes proceedings
177.Guidance about how to seek redress against media organisations
178.Review of processing of personal data for the purposes of journalism
179.Effectiveness of the media's dispute resolution procedures
180.Jurisdiction
181.Interpretation of Part 6
182.Regulations and consultation
Changes to the Data Protection Convention
183.Power to reflect changes to the Data Protection Convention
184.Prohibition of requirement to produce relevant records
185.Avoidance of certain contractual terms relating to health records
186.Data subject's rights and other prohibitions and restrictions
187.Representation of data subjects with their authority
188.Representation of data subjects with their authority: collective proceedings
189.Duty to review provision for representation of data subjects
190.Post-review powers to make provision about representation of data subjects
191.Framework for Data Processing by Government
192.Approval of the Framework
193.Publication and review of the Framework
194.Effect of the Framework
Data-sharing: HMRC and reserve forces
195.Reserve forces: data-sharing by HMRC
196.Penalties for offences
197.Prosecution
198.Liability of directors etc
199.Recordable offences
200.Guidance about PACE codes of practice
201.Disclosure of information to the Tribunal
202.Proceedings in the First-tier Tribunal: contempt
203.Tribunal Procedure Rules
204.Meaning of “health professional” and “social work professional”
205.General interpretation
206.Index of defined expressions
207.Territorial application of this Act
208.Children in Scotland
209.Application to the Crown
210.Application to Parliament
211.Minor and consequential provision
212.Commencement
213.Transitional provision
214.Extent
215.Short title
Special categories of personal data and criminal convictions etc data
Employment, social security and social protection
1.(1) This condition is met if— (a) the processing is...
Health or social care purposes
2.(1) This condition is met if the processing is necessary...
3.This condition is met if the processing—
4.This condition is met if the processing—
Requirement for an appropriate policy document when relying on conditions in this Part
5.(1) Except as otherwise provided, a condition in this Part...
Statutory etc and government purposes
6.(1) This condition is met if the processing—
Administration of justice and parliamentary purposes
7.This condition is met if the processing is necessary—
8.(1) This condition is met if the processing—
9.(1) This condition is met if the processing—
10.(1) This condition is met if the processing—
Protecting the public against dishonesty etc
11.(1) This condition is met if the processing—
Regulatory requirements relating to unlawful acts and dishonesty etc
12.(1) This condition is met if— (a) the processing is...
Journalism etc in connection with unlawful acts and dishonesty etc
13.(1) This condition is met if— (a) the processing consists...
14.(1) This condition is met if the processing—
Suspicion of terrorist financing or money laundering
15.This condition is met if the processing is necessary for...
16.(1) This condition is met if the processing—
17.(1) This condition is met if the processing—
18.(1) This condition is met if— (a) the processing is...
19.(1) This condition is met if the processing—
20.(1) This condition is met if the processing—
21.(1) This condition is met if the processing—
22.(1) This condition is met if the processing—
Elected representatives responding to requests
23.(1) This condition is met if— (a) the processing is...
24.(1) This condition is met if— (a) the processing consists...
Informing elected representatives about prisoners
25.(1) This condition is met if— (a) the processing consists...
Publication of legal judgments
26.This condition is met if the processing—
27.(1) This condition is met if the processing is necessary—...
Standards of behaviour in sport
28.(1) This condition is met if the processing—
29.This condition is met if the data subject has given...
Protecting individual's vital interests
30.This condition is met if— (a) the processing is necessary...
Processing by not-for-profit bodies
31.This condition is met if the processing is carried out—...
Personal data in the public domain
32.This condition is met if the processing relates to personal...
33.This condition is met if the processing—
34.This condition is met if the processing is necessary when...
Administration of accounts used in commission of indecency offences involving children
35.(1) This condition is met if— (a) the processing is...
Extension of conditions in Part 2 of this Schedule referring to substantial public interest
36.This condition is met if the processing would meet a...
Extension of insurance conditions
37.This condition is met if the processing—
38.This Part of this Schedule makes provision about the processing...
Requirement to have an appropriate policy document in place
39.The controller has an appropriate policy document in place in...
40.(1) Where personal data is processed in reliance on a...
Additional safeguard: record of processing
41.A record maintained by the controller, or the controller's representative,...
Exemptions etc from the GDPR
GDPR provisions to be adapted or restricted: “the listed GDPR provisions”
1.In this Part of this Schedule, “the listed GDPR provisions”...
Crime and taxation: general
2.(1) The listed GDPR provisions and Article 34(1) and (4)...
Crime and taxation: risk assessment systems
3.(1) The GDPR provisions listed in sub-paragraph (3) do not...
4.(1) The GDPR provisions listed in sub-paragraph (2) do not...
5.(1) The listed GDPR provisions do not apply to personal...
6.In this Part of this Schedule, “the listed GDPR provisions”...
Functions designed to protect the public etc
7.The listed GDPR provisions do not apply to personal data...
8.(1) The listed GDPR provisions do not apply to personal...
Functions of the Bank of England
9.(1) The listed GDPR provisions do not apply to personal...
Regulatory functions relating to legal services, the health service and children's services
10.(1) The listed GDPR provisions do not apply to personal...
Regulatory functions of certain other persons
11.The listed GDPR provisions do not apply to personal data...
12.In the Table in paragraph 11— “consumer protection enforcer” has...
13.The listed GDPR provisions and Article 34(1) and (4) of...
Judicial appointments, judicial independence and judicial proceedings
14.(1) The listed GDPR provisions do not apply to personal...
Crown honours, dignities and appointments
15.(1) The listed GDPR provisions do not apply to personal...
Protection of the rights of others: general
16.(1) Article 15(1) to (3) of the GDPR (confirmation of...
Assumption of reasonableness for health workers, social workers and education workers
17.(1) For the purposes of paragraph 16(2)(b), it is to...
18.In this Part of this Schedule, “the listed GDPR provisions”...
19.The listed GDPR provisions do not apply to personal data...
20.(1) A person need not comply with the listed GDPR...
21.(1) The listed GDPR provisions do not apply to personal...
22.The listed GDPR provisions do not apply to personal data...
23.The listed GDPR provisions do not apply to personal data...
24.The listed GDPR provisions do not apply to personal data...
Exam scripts and exam marks
25.(1) The listed GDPR provisions do not apply to personal...
Journalistic, academic, artistic and literary purposes
26.(1) In this paragraph, “the special purposes” means one or...
27.(1) The listed GDPR provisions do not apply to personal...
28.(1) The listed GDPR provisions do not apply to personal...
Exemptions etc from the GDPR: health, social work, education and child abuse data
1.In this Schedule “the listed GDPR provisions” means the following...
2.(1) In this Part of this Schedule— “the appropriate health...
Exemption from the listed GDPR provisions: data processed by a court
3.(1) The listed GDPR provisions do not apply to data...
Exemption from the listed GDPR provisions: data subject's expectations and wishes
4.(1) This paragraph applies where a request for data concerning...
Exemption from Article 15 of the GDPR: serious harm
5.(1) Article 15(1) to (3) of the GDPR (confirmation of...
Restriction of Article 15 of the GDPR: prior opinion of appropriate health professional
6.(1) Article 15(1) to (3) of the GDPR (confirmation of...
7.(1) In this Part of this Schedule— “education data” has...
8.(1) This paragraph applies to personal data falling within any...
9.(1) The listed GDPR provisions do not apply to data...
10.(1) This paragraph applies where a request for social work...
11.Article 15(1) to (3) of the GDPR (confirmation of processing,...
Restriction of Article 15 of the GDPR: prior opinion of Principal Reporter
12.(1) This paragraph applies where— (a) a question arises as...
13.In this Part of this Schedule “educational record” means a...
14.(1) This paragraph applies to a record of information which—...
15.(1) This paragraph applies to a record of information which...
16.(1) This paragraph applies to a record of information which—...
17.(1) In this Part of this Schedule— “education authority” and...
18.(1) The listed GDPR provisions do not apply to education...
19.Article 15(1) to (3) of the GDPR (confirmation of processing,...
20.(1) This paragraph applies where— (a) a question arises as...
Exemption from Article 15 of the GDPR: child abuse data
21.(1) This paragraph applies where a request for child abuse...
Exemptions etc from the GDPR: disclosure prohibited or restricted by an enactment
Human fertilisation and embryology information
2.The listed GDPR provisions do not apply to personal data...
Adoption records and reports
3.(1) The listed GDPR provisions do not apply to personal...
4.(1) The listed GDPR provisions do not apply to personal...
Parental order records and reports
Information provided by Principal Reporter for children's hearing
6.The listed GDPR provisions do not apply to personal data...
Accreditation of certification providers: reviews and appeals
1.(1) This Schedule applies where— (a) a person (“the applicant”)...
2.(1) The applicant may ask the accreditation authority to review...
3.(1) If the applicant is dissatisfied with the decision on...
4.(1) If the applicant makes a request in accordance with...
5.(1) If the appeal panel considers it necessary, a hearing...
Decision following referral to appeal panel
6.(1) The appeal panel must, before the end of the...
Meaning of “working day”
7.In this Schedule, “working day” means any day other than—...
The applied GDPR and the applied Chapter 2
1.In its application by virtue of section 22(1), the GDPR...
2.(1) References to “this Regulation” and to provisions of the...
References to Union law and Member State law
3.(1) References to “Union law”, “Member State law”, “the law...
References to the Union and to Member States
4.(1) References to “the Union”, “a Member State” and “Member...
References to supervisory authorities
5.(1) References to a “supervisory authority”, a “competent supervisory authority”...
References to the national parliament
6.References to “the national parliament” have effect as references to...
Chapter I of the GDPR (general provisions)
7.For Article 2 (material scope) substitute— This Regulation applies to the processing of personal data to...
8.For Article 3 substitute— Article 3 Territorial application Subsections (1),...
9.In Article 4 (definitions)— (a) in paragraph (7) (meaning of...
Chapter II of the GDPR (principles)
10.In Article 6 (lawfulness of processing)— (a) omit paragraph 2;...
11.In Article 8 (conditions applicable to child's consent in relation...
12.In Article 9 (processing of special categories of personal data)—...
13.In Article 10 (processing of personal data relating to criminal...
Section 1 of Chapter III of the GDPR (rights of the data subject: transparency and modalities)
14.In Article 12 (transparent information etc for the exercise of...
Section 2 of Chapter III of the GDPR (rights of the data subject: information and access to personal data)
15.In Article 13 (personal data collected from data subject: information...
16.In Article 14 (personal data collected other than from data...
Section 3 of Chapter III of the GDPR (rights of the data subject: rectification and erasure)
17.In Article 17 (right to erasure (‘right to be forgotten’))—...
18.In Article 18 (right to restriction of processing), in paragraph...
Section 4 of Chapter III of the GDPR (rights of the data subject: right to object and automated individual decision-making)
19.In Article 21 (right to object), in paragraph 5, omit...
20.In Article 22 (automated individual decision-making, including profiling), for paragraph...
Section 5 of Chapter III of the GDPR (rights of the data subject: restrictions)
21.In Article 23 (restrictions), in paragraph 1—
22.In Article 26 (joint controllers), in paragraph 1, for “Union...
23.Omit Article 27 (representatives of controllers or processors not established...
24.In Article 28 (processor)— (a) in paragraph 3, in point...
25.In Article 30 (records of processing activities)—
26.In Article 31 (co-operation with the supervisory authority), omit “and,...
Section 3 of Chapter IV of the GDPR (controller and processor: data protection impact assessment and prior consultation)
27.In Article 35 (data protection impact assessment), omit paragraphs 4,...
28.In Article 36 (prior consultation)— (a) for paragraph 4 substitute—...
Section 4 of Chapter IV of the GDPR (controller and processor: data protection officer)
29.In Article 37 (designation of data protection officers), omit paragraph...
30.In Article 39 (tasks of the data protection officer), in...
Section 5 of Chapter IV of the GDPR (controller and processor: codes of conduct and certification)
31.In Article 40 (codes of conduct)— (a) in paragraph 1,...
32.In Article 41 (monitoring of approved codes of conduct), omit...
33.In Article 42 (certification)— (a) in paragraph 1—
34.In Article 43 (certification bodies)— (a) in paragraph 1, in...
Chapter V of the GDPR (transfers of data to third countries or international organisations)
35.In Article 45 (transfers on the basis of an adequacy...
36.In Article 46 (transfers subject to appropriate safeguards)—
37.In Article 47 (binding corporate rules)— (a) in paragraph 1,...
38.In Article 49 (derogations for specific situations)—
39.In Article 50 (international co-operation for the protection of personal...
40.In Article 51 (supervisory authority)— (a) in paragraph 1—
41.In Article 52 (independence)— (a) in paragraph 2—
42.Omit Article 53 (general conditions for the members of the...
43.Omit Article 54 (rules on the establishment of the supervisory...
Section 2 of Chapter VI of the GDPR (independent supervisory authorities: competence, tasks and powers)
44.In Article 55 (competence)— (a) in paragraph 1, omit “on...
45.Omit Article 56 (competence of the lead supervisory authority).
46.In Article 57 (tasks)— (a) in paragraph 1, in the...
47.In Article 58 (powers)— (a) in paragraph 1, in point...
48.In Article 59 (activity reports)— (a) for “, the government...
Chapter VII of the GDPR (co-operation and consistency)
49.For Articles 60 to 76 substitute— Article 61 Co-operation with...
50.In Article 77 (right to lodge a complaint with a...
51.In Article 78 (right to an effective judicial remedy against...
52.In Article 79 (right to an effective judicial remedy against...
53.In Article 80 (representation of data subjects)—
54.Omit Article 81 (suspension of proceedings).
55.In Article 82 (right to compensation and liability), for paragraph...
56.In Article 83 (general conditions for imposing administrative fines)—
57.In Article 84 (penalties)— (a) for paragraph 1 substitute— The rules on other penalties applicable to infringements of this...
58.In Article 85 (processing and freedom of expression and information)—...
59.In Article 86 (processing and public access to official documents),...
60.Omit Article 87 (processing of national identification number).
61.Omit Article 88 (processing in the context of employment).
62.In Article 89 (safeguards and derogations relating to processing for...
63.Omit Article 90 (obligations of secrecy).
64.Omit Article 91 (existing data protection rules of churches and...
Chapter X of the GDPR (delegated acts and implementing acts)
65.Omit Article 92 (exercise of the delegation).
66.Omit Article 93 (committee procedure).
67.Omit Article 94 (repeal of Directive 95/46/EC).
68.Omit Article 95 (relationship with Directive 2002/58/EC).
69.In Article 96 (relationship with previously concluded Agreements), for “by...
70.Omit Article 97 (Commission reports).
71.Omit Article 98 (Commission reviews).
72.Omit Article 99 (entry into force and application).
PART 2 Modifications to Chapter 2 of Part 2
73.In its application by virtue of section 22(2), Chapter 2...
74.(1) References to Chapter 2 of Part 2 and the...
75.In section 16 (power to make further exemptions etc by...
1.Any United Kingdom government department other than a non-ministerial government...
2.The Scottish Ministers.
3.Any Northern Ireland department.
4.The Welsh Ministers.
5.The chief constable of a police force maintained under section...
6.The Commissioner of Police of the Metropolis.
7.The Commissioner of Police for the City of London.
8.The Chief Constable of the Police Service of Northern Ireland....
9.The chief constable of the Police Service of Scotland.
10.The chief constable of the British Transport Police.
11.The chief constable of the Civil Nuclear Constabulary.
12.The chief constable of the Ministry of Defence Police.
13.The Provost Marshal of the Royal Navy Police.
14.The Provost Marshal of the Royal Military Police.
15.The Provost Marshal of the Royal Air Force Police.
16.The chief officer of— (a) a body of constables appointed...
17.A body established in accordance with a collaboration agreement under...
18.The Director General of the Independent Office for Police Conduct....
19.The Police Investigations and Review Commissioner.
20.The Police Ombudsman for Northern Ireland.
21.The Commissioners for Her Majesty's Revenue and Customs.
22.The Welsh Revenue Authority.
23.Revenue Scotland.
24.The Director General of the National Crime Agency.
25.The Director of the Serious Fraud Office.
26.The Director of Border Revenue.
27.The Financial Conduct Authority.
28.The Health and Safety Executive.
29.The Competition and Markets Authority.
30.The Gas and Electricity Markets Authority.
31.The Food Standards Agency.
32.Food Standards Scotland.
33.Her Majesty's Land Registry.
34.The Criminal Cases Review Commission.
35.The Scottish Criminal Cases Review Commission.
36.A provider of probation services (other than the Secretary of...
37.The Youth Justice Board for England and Wales.
38.The Parole Board for England and Wales.
39.The Parole Board for Scotland.
40.The Parole Commissioners for Northern Ireland.
41.The Probation Board for Northern Ireland.
42.The Prisoner Ombudsman for Northern Ireland.
43.A person who has entered into a contract for the...
44.A person who has entered into a contract with the...
45.A person who is, under or by virtue of any...
46.A youth offending team established under section 39 of the...
47.The Director of Public Prosecutions.
48.The Director of Public Prosecutions for Northern Ireland.
49.The Lord Advocate.
50.A Procurator Fiscal.
51.The Director of Service Prosecutions.
52.The Information Commissioner.
53.The Scottish Information Commissioner.
54.The Scottish Courts and Tribunal Service.
55.The Crown agent.
56.A court or tribunal.
Statutory etc purposes
1.This condition is met if the processing—
2.This condition is met if the processing is necessary for...
3.This condition is met if the processing is necessary to...
4.(1) This condition is met if— (a) the processing is...
Personal data already in the public domain
5.This condition is met if the processing relates to personal...
6.This condition is met if the processing—
7.This condition is met if the processing is necessary when...
Archiving etc
9.This condition is met if the processing is necessary—
1.The data subject has given consent to the processing.
2.The processing is necessary— (a) for the performance of a...
3.The processing is necessary for compliance with a legal obligation...
4.The processing is necessary in order to protect the vital...
5.The processing is necessary— (a) for the administration of justice,...
6.(1) The processing is necessary for the purposes of legitimate...
2.The processing is necessary for the purposes of exercising or...
3.The processing is necessary— (a) in order to protect the...
5.The information contained in the personal data has been made...
6.The processing— (a) is necessary for the purpose of, or...
7.The processing is necessary— (a) for the administration of justice,...
8.(1) The processing is necessary for medical purposes and is...
9.(1) The processing— (a) is of sensitive personal data consisting...
1.In this Schedule, “the listed provisions” means—
2.The listed provisions do not apply to personal data processed...
3.(1) The listed provisions do not apply to personal data...
4.The listed provisions do not apply to personal data where...
5.The listed provisions do not apply to personal data to...
Crown honours and dignities
6.The listed provisions do not apply to personal data processed...
7.The listed provisions do not apply to personal data to...
8.The listed provisions do not apply to personal data to...
9.The listed provisions do not apply to personal data that...
10.The listed provisions do not apply to personal data that...
Confidential references given by the controller
11.The listed provisions do not apply to personal data consisting...
Exam scripts and marks
12.(1) The listed provisions do not apply to personal data...
13.(1) The listed provisions do not apply to personal data...
14.(1) The listed provisions do not apply to personal data...
1.(1) The Commissioner is to continue to be a corporation...
2.(1) The Commissioner is to be appointed by Her Majesty...
3.(1) The Commissioner may be relieved of office by Her...
Salary etc
4.(1) The Commissioner is to be paid such salary as...
5.(1) The Commissioner— (a) must appoint one or more deputy...
6.(1) The functions of the Commissioner are to be carried...
Authentication of the seal of the Commissioner
7.The application of the seal of the Commissioner is to...
Presumption of authenticity of documents issued by the Commissioner
8.A document purporting to be an instrument issued by the...
9.The Secretary of State may make payments to the Commissioner...
Fees etc and other sums
10.(1) All fees, charges, penalties and other sums received by...
11.(1) The Commissioner must— (a) keep proper accounts and other...
12.Paragraphs 1(1), 7 and 8 do not extend to Scotland....
1.(1) The Commissioner must— (a) monitor and enforce Parts 3...
2.The Commissioner has the following investigative, corrective, authorisation and advisory...
3.In this Schedule— “foreign designated authority” means an authority designated...
Co-operation and mutual assistance
1.(1) The Commissioner may provide information or assistance to an...
Requests for information and assistance from LED supervisory authorities
2.(1) This paragraph applies where the Commissioner receives a request...
3.(1) Subject to sub-paragraph (2), any information or assistance that...
4.Where the Commissioner receives information from an LED supervisory authority...
LED supervisory authority
5.In this Part of this Schedule, “LED supervisory authority” means...
6.(1) The Commissioner must, at the request of a foreign...
7.(1) This paragraph applies where a request for assistance in...
Assisting UK residents with requests under Article 8 of the Convention
8.(1) This paragraph applies where a request for assistance in...
9.Where the Commissioner receives information from a foreign designated authority...
Foreign designated authority
10.In this Part of this Schedule, “foreign designated authority” means...
Issue of warrants in connection with non-compliance and offences
1.(1) This paragraph applies if a judge of the High...
Issue of warrants in connection with assessment notices
2.(1) This paragraph applies if a judge of the High...
Restrictions on issuing warrants: processing for the special purposes
3.A judge must not issue a warrant under this Schedule...
Restrictions on issuing warrants: procedural requirements
4.(1) A judge must not issue a warrant under this...
Content of warrants
5.(1) A warrant issued under this Schedule must authorise the...
Copies of warrants
6.A judge who issues a warrant under this Schedule must—...
Execution of warrants: reasonable force
7.A person executing a warrant issued under this Schedule may...
Execution of warrants: time when executed
8.A warrant issued under this Schedule may be executed only...
Execution of warrants: occupier of premises
9.(1) If an occupier of the premises in respect of...
Execution of warrants: seizure of documents etc
10.(1) This paragraph applies where a person executing a warrant...
Matters exempt from inspection and seizure: privileged communications
11.(1) The powers of inspection and seizure conferred by a...
Matters exempt from inspection and seizure: Parliamentary privilege
12.The powers of inspection and seizure conferred by a warrant...
13.(1) This paragraph applies if a person in occupation of...
14.(1) Where a warrant issued under this Schedule is executed—...
15.(1) It is an offence for a person—
16.(1) An explanation given, or information provided, by a person...
Vessels, vehicles etc
17.In this Schedule— (a) “premises” includes a vehicle, vessel or...
18.In the application of this Schedule to Scotland—
19.In the application of this Schedule to Northern Ireland—
1.In this Schedule, “penalty” means a penalty imposed by a...
2.(1) Before giving a person a penalty notice, the Commissioner...
3.(1) A notice of intent must contain the following information—...
4.(1) The Commissioner may not give a penalty notice before...
5.(1) A penalty notice must contain the following information—
6.(1) A penalty must be paid to the Commissioner within...
7.(1) The Commissioner may vary a penalty notice by giving...
8.(1) The Commissioner may cancel a penalty notice by giving...
9.(1) The Commissioner must not take action to recover a...
1.In this Schedule— “relevant period” means— the period of 18...
2.(1) This paragraph applies where the Commissioner gives an information...
3.(1) Sub-paragraph (2) applies where the Commissioner gives an assessment...
Applications in respect of urgent notices
4.Section 164 applies where an information notice or assessment notice...
1.(1) In section 184, “relevant record” means—
Relevant health records
2.“Relevant health record” means a health record which has been...
Relevant records relating to a conviction or caution
3.(1) “Relevant record relating to a conviction or caution” means...
Relevant records relating to statutory functions
4.(1) “Relevant record relating to statutory functions” means a record...
5.In this Schedule, “data subject access right” means a right...
Records stating that personal data is not processed
6.For the purposes of this Schedule, a record which states...
7.(1) The Secretary of State may by regulations amend this...
Registration Service Act 1953 (c. 37)
1.(1) Section 19AC of the Registration Service Act 1953 (codes...
2.(1) Section 1A of the Veterinary Surgeons Act 1966 (functions...
3.In section 11AA(1) of the Parliamentary Commissioner Act 1967 (disclosure...
4.The Local Government Act 1974 is amended as follows.
5.In section 33A(1) (disclosure of information by Local Commissioner to...
6.In section 34O(1) (disclosure of information by Local Commissioner to...
7.The Consumer Credit Act 1974 is amended as follows.
8.In section 157(2A) (duty to disclose name etc of agency)—...
9.In section 159(1)(a) (correction of wrong information) for “section 7...
10.In section 189(1) (definitions), at the appropriate place insert— “the...
11.The Pharmacy (Northern Ireland) Order 1976 is amended as follows....
12.In article 2(2) (interpretation), omit the definition of “Directive 95/46/EC”....
13.In article 8D (European professional card), after paragraph (3) insert—...
14.In article 22A(6) (Directive 2005/36/EC: functions of competent authority etc.),...
15.(1) Schedule 2C (Directive 2005/36/EC: European professional card) is amended...
16.(1) The table in Schedule 2D (functions of the Society...
17.(1) Paragraph 2 of Schedule 3 (fitness to practice: disclosure...
18.(1) Schedule 2 to the Representation of the People Act...
19.The Medical Act 1983 is amended as follows.
20.(1) Section 29E (evidence) is amended as follows.
21.(1) Section 35A (General Medical Council's power to require disclosure...
22.In section 49B(7) (Directive 2005/36: designation of competent authority etc.),...
23.In section 55(1) (interpretation), omit the definition of “Directive 95/46/EC”....
24.(1) Paragraph 9B of Schedule 1 (incidental powers of the...
25.(1) Paragraph 5A of Schedule 4 (professional performance assessments and...
26.(1) The table in Schedule 4A (functions of the General...
27.The Dentists Act 1984 is amended as follows.
28.(1) Section 33B (the General Dental Council's power to require...
29.In section 36ZA(6) (Directive 2005/36: designation of competent authority etc),...
30.(1) Section 36Y (the General Dental Council's power to require...
31.In section 53(1) (interpretation), omit the definition of “Directive 95/46/EC”....
32.(1) The table in Schedule 4ZA (Directive 2005/36: functions of...
33.In section 449(11) of the Companies Act 1985 (provision for...
Access to Medical Reports Act 1988 (c. 28)
34.In section 2(1) of the Access to Medical Reports Act...
35.(1) Section 13B of the Opticians Act 1989 (the Council's...
36.The Access to Health Records Act 1990 is amended as...
37.For section 2 substitute— Health professionals In this Act, “health professional” has the same meaning as...
38.(1) Section 3 (right of access to health records) is...
39.(1) Section 33D of the Human Fertilisation and Embryology Act...
40.(1) Section 251B of the Trade Union and Labour Relations...
41.In the table in Part 1 of Schedule 1 to...
42.(1) Article 90B of the Industrial Relations (Northern Ireland) Order...
43.In section 18A(1) of the Health Service Commissioners Act 1993...
44.The Data Protection Act 1998 is repealed, with the exception...
45.In section 17A(4) of the Crime and Disorder Act 1998...
46.(1) Section 19 of the Food Standards Act 1999 (publication...
47.(1) Section 13 of the Immigration and Asylum Act 1999...
48.The Financial Services and Markets Act 2000 is amended as...
49.In section 86(9) (exempt offers to the public), for “the...
50.In section 391A(6)(b) (publication: special provisions relating to the capital...
51.In section 391C(7)(a) (publication: special provisions relating to the UCITS...
52.In section 391D(9)(a) (publication: special provisions relating to the markets...
53.In section 417 (definitions), at the appropriate place insert— “the...
54.In section 21F(2)(d) of the Terrorism Act 2000 (other permitted...
55.The Freedom of Information Act 2000 is amended as follows....
56.In section 2(3) (absolute exemptions), for paragraph (f) substitute—
57.In section 18 (the Information Commissioner), omit subsection (1).
58.(1) Section 40 (personal information) is amended as follows.
59.Omit section 49 (reports to be laid before Parliament).
60.For section 61 (appeal proceedings) substitute— Appeal proceedings (1) Tribunal Procedure Rules may make provision for regulating the...
61.In section 76(1) (disclosure of information between Commissioner and ombudsmen),...
62.After section 76A insert— Disclosure of information to Tribunal (1) No enactment or rule of law prohibiting or restricting...
63.In section 77(1)(b) (offence of altering etc records with intent...
64.In section 84 (interpretation), at the appropriate place insert— “the...
65.(1) Paragraph 28 of Schedule 19C to the Political Parties,...
66.The Public Finance and Accountability (Scotland) Act 2000 is amended...
67.In section 26B(3)(a) (voluntary disclosure of data to Audit Scotland),...
68.In section 26C(3)(a) (power to require disclosure of data), for...
69.In section 29(1) (interpretation), at the appropriate place insert— “the...
70.The Criminal Justice and Police Act 2001 is amended as...
71.In section 57(1) (retention of seized items)—
72.In section 65(7) (meaning of “legal privilege”)—
73.In Schedule 1 (powers of seizure)— (a) omit paragraph 65,...
74.The Anti-terrorism, Crime and Security Act 2001 is amended as...
75.(1) Section 19 (disclosure of information held by revenue departments)...
76.(1) Part 1 of Schedule 4 (extension of existing disclosure...
77.(1) Section 7A of the Health and Personal Social Services...
78.(1) Section 5A of the Justice (Northern Ireland) Act 2002...
79.The Proceeds of Crime Act 2002 is amended as follows....
80.In section 333C(2)(d) (other permitted disclosures between institutions etc), for...
81.In section 436(3)(a) (disclosure of information to certain Directors), for...
82.In section 438(8)(a) (disclosure of information by certain Directors), for...
83.In section 439(3)(a) (disclosure of information to Lord Advocate and...
84.In section 441(7)(a) (disclosure of information by Lord Advocate and...
85.After section 442 insert— Data protection legislation In this Part, “the data protection legislation” has the same...
86.(1) Section 237 of the Enterprise Act 2002 (general restriction...
87.(1) In Schedule 5 to the Scottish Public Services Ombudsman...
88.The Freedom of Information (Scotland) Act 2002 is amended as...
89.In section 2(2)(e)(ii) (absolute exemptions), omit “by virtue of subsection...
90.(1) Section 38 (personal information) is amended as follows.
91.Schedule 5 to the Courts Act 2003 (collection of fines)...
92.(1) Paragraph 9C (disclosure of information in connection with making...
93.(1) Paragraph 10A (attachment of earnings orders (Justice Act (Northern...
94.(1) Section 94 of the Sexual Offences Act 2003 (Part...
95.The Criminal Justice Act 2003 is amended as follows.
96.In section 327A(9) (disclosure of information about convictions etc of...
97.In section 327B (disclosure of information about convictions etc of...
Mental Health (Care and Treatment) (Scotland) Act 2003 (asp 13)
98.(1) Section 279 of the Mental Health (Care and Treatment)...
99.(1) Section 64C of the Public Audit (Wales) Act 2004...
100.The Companies (Audit, Investigations and Community Enterprise) Act 2004 is...
101.(1) Section 15A (disclosure of information by tax authorities) is...
102.(1) Section 15D (permitted disclosure of information obtained under compulsory...
103.(1) Section 54 of the Domestic Violence, Crime and Victims...
104.The Children Act 2004 is amended as follows.
105.(1) Section 12 (information databases) is amended as follows.
106.(1) Section 29 (information databases: Wales) is amended as follows....
107.(1) Section 107 of the Constitutional Reform Act 2005 (disclosure...
108.In section 64 of the Mental Capacity Act 2005 (interpretation),...
109.(1) Section 34X of the Public Services Ombudsman (Wales) Act...
Commissioners for Revenue and Customs Act 2005 (c. 11)
110.(1) Section 22 of the Commissioners for Revenue and Customs...
111.(1) Section 352 of the Gambling Act 2005 (data protection)...
112.(1) Section 18 of the Commissioner for Older People (Wales)...
113.The National Health Service Act 2006 is amended as follows....
114.(1) Section 251 (control of patient information) is amended as...
115.(1) Section 264C (provision and disclosure of information about health...
116.In paragraph 7B(3) of Schedule 1 (further provision about the...
117.The National Health Service (Wales) Act 2006 is amended as...
118.(1) Section 201C (provision of information about medical supplies: supplementary)...
119.In paragraph 7B(3) of Schedule 1 (further provision about the...
120.The Companies Act 2006 is amended as follows.
121.In section 458(2) (disclosure of information by tax authorities)—
122.In section 461(7) (permitted disclosure of information obtained under compulsory...
123.In section 948(9) (restrictions on disclosure) for “the Data Protection...
124.In section 1173(1) (minor definitions: general), at the appropriate place...
125.In section 1224A(7) (restrictions on disclosure), for “the Data Protection...
126.In section 1253D(3) (restriction on transfer of audit working papers...
127.In section 1261(1) (minor definitions: Part 42), at the appropriate...
128.In section 1262 (index of defined expressions: Part 42), at...
129.In Schedule 8 (index of defined expressions: general), at the...
130.The Tribunals, Courts and Enforcement Act 2007 is amended as...
131.In section 11(5)(b) (right to appeal to Upper Tribunal), for...
132.In section 13(8)(a) (right to appeal to the Court of...
133.The Statistics and Registration Service Act 2007 is amended as...
134.(1) Section 45 (information held by HMRC) is amended as...
135.(1) Section 45A (information held by other public authorities) is...
136.(1) Section 45B(3) (access to information held by Crown bodies...
137.(1) Section 45C(13) (power to require disclosures by other public...
138.In section 45D(9)(b) (power to require disclosure by undertakings), for...
139.(1) Section 45E (further provision about powers in sections 45B,...
140.(1) Section 53A (disclosure by the Statistics Board to devolved...
141.(1) Section 54 (Data Protection Act 1998 and Human Rights...
142.In section 67 (general interpretation: Part 1), at the appropriate...
143.The Serious Crime Act 2007 is amended as follows.
144.(1) Section 5A (verification and disclosure of information) is amended...
145.(1) Section 68 (disclosure of information to prevent fraud) is...
146.(1) Section 85 (disclosure of information by Revenue and Customs)...
Legal Services Act 2007 (c. 29)
147.(1) Section 169 of the Legal Services Act 2007 (disclosure...
Adoption and Children (Scotland) Act 2007 (asp 4)
148.In section 74 of the Adoption and Children (Scotland) Act...
149.The Criminal Justice and Immigration Act 2008 is amended as...
150.Omit— (a) section 77 (power to alter penalty for unlawfully...
151.(1) Section 114 (supply of information to Secretary of State...
152.(1) Section 70 of the Regulatory Enforcement and Sanctions Act...
153.In section 20A(5) of the Health and Social Care Act...
154.(1) Section 20 of the Counter-Terrorism Act 2008 (disclosure and...
Public Health etc. (Scotland) Act 2008 (asp 5)
155.(1) Section 117 of the Public Health etc. (Scotland) Act...
Banking Act 2009 (c. 1)
156.(1) Section 83ZY of the Banking Act 2009 (special resolution...
Borders, Citizenship and Immigration Act 2009 (c. 11)
157.(1) Section 19 of the Borders, Citizenship and Immigration Act...
158.The Marine and Coastal Access Act 2009 is amended as...
159.(1) Paragraph 13 of Schedule 7 (further provision about civil...
160.(1) Paragraph 9 of Schedule 10 (further provision about fixed...
161.In Schedule 21 to the Coroners and Justice Act 2009...
162.(1) Section 38 of the Broads Authority Act 2009 (provision...
Health and Social Care (Reform) Act (Northern Ireland) 2009 (c. 1 (N.I.))
163.(1) Section 13 of the Health and Social Care (Reform)...
Terrorist Asset-Freezing etc. Act 2010 (c. 38)
164.(1) Section 25 of the Terrorist Asset-Freezing etc. Act 2010...
165.(1) Paragraph 12 of Schedule 2 to the Marine (Scotland)...
166.(1) Section 59 of the Charities Act 2011 (disclosure: supplementary)...
167.The Welsh Language (Wales) Measure 2011 is amended as follows....
168.(1) Section 22 (power to disclose information) is amended as...
169.(1) Paragraph 8 of Schedule 2 (inquiries by the Commissioner:...
Safeguarding Board Act (Northern Ireland) 2011 (c. 7 (N.I))
170.(1) Section 10 of the Safeguarding Board Act (Northern Ireland)...
171.The Health and Social Care Act 2012 is amended as...
172.In section 250(7) (power to publish information standards), for the...
173.(1) Section 251A (consistent identifiers) is amended as follows.
174.(1) Section 251B (duty to share information) is amended as...
Protection of Freedoms Act 2012 (c. 9)
175.The Protection of Freedoms Act 2012 is amended as follows....
176.(1) Section 27 (exceptions and further provision about consent and...
177.In section 28(1) (interpretation: Chapter 2), for the definition of...
178.In section 29(7) (code of practice for surveillance camera systems),...
HGV Road User Levy Act 2013 (c. 7)
179.(1) Section 14A of the HGV Road User Levy Act...
Crime and Courts Act 2013 (c. 22)
180.The Crime and Courts Act 2013 is amended as follows....
181.(1) Section 42 (other interpretive provisions) is amended as follows....
182.(1) Paragraph 1 of Schedule 7 (statutory restrictions on disclosure)...
Marine Act (Northern Ireland) 2013 (c. 10 (N.I.))
183.(1) Paragraph 8 of Schedule 2 to the Marine Act...
Local Audit and Accountability Act 2014 (c. 2)
184.(1) Paragraph 3 of Schedule 9 to the Local Audit...
185.(1) Paragraph 7 of Schedule 4 to the Anti-social Behaviour,...
Immigration Act 2014 (c. 22)
186.(1) Paragraph 6 of Schedule 6 to the Immigration Act...
Care Act 2014 (c. 23)
187.In section 67(9) of the Care Act 2014 (involvement in...
Social Services and Well-being (Wales) Act 2014 (anaw 4)
188.In section 18(10)(b) of the Social Services and Well-being (Wales)...
Counter-Terrorism and Security Act 2015 (c. 6)
189.(1) Section 38 of the Counter-Terrorism and Security Act 2015...
Small Business, Enterprise and Employment Act 2015 (c. 26)
190.(1) Section 6 of the Small Business, Enterprise and Employment...
191.(1) Section 54A of the Modern Slavery Act 2015 (Gangmasters...
192.The Human Trafficking and Exploitation (Criminal Justice and Support for...
193.In section 13(5) (duty to notify National Crime Agency about...
194.In section 25(1) (interpretation of this Act), at the appropriate...
195.In paragraph 18(5) of Schedule 3 (supply of information to...
Justice Act (Northern Ireland) 2015 (c. 9 (N.I.))
196.(1) Section 72 of the Justice Act (Northern Ireland) 2015...
197.(1) Section 7 of the Immigration Act 2016 (information gateways:...
198.The Investigatory Powers Act 2016 is amended as follows.
199.In section 1(5)(b), for sub-paragraph (ii) substitute—
200.In section 199 (bulk personal datasets: interpretation), for subsection (2)...
201.In section 202(4) (restriction on use of class BPD warrants),...
202.In section 206 (additional safeguards for health records), for subsection...
203.(1) Section 237 (information gateway) is amended as follows.
Public Services Ombudsman Act (Northern Ireland) 2016 (c. 4 (N.I.))
204.(1) Section 49 of the Police Services Ombudsman Act (Northern...
Health and Social Care (Control of Data Processing) Act (Northern Ireland) 2016 (c. 12 (N.I.))
205.(1) Section 1 of the Health and Social Care (Control...
Mental Capacity Act (Northern Ireland) 2016 (c. 18 (N.I.))
206.In section 306(1) of the Mental Capacity Act (Northern Ireland)...
207.The Justice Act (Northern Ireland) 2016 is amended as follows....
208.(1) Section 17 (disclosure of information) is amended as follows....
209.In section 44(3) (disclosure of information)— (a) in paragraph (a),...
Policing and Crime Act 2017 (c. 3)
210.(1) Section 50 of the Policing and Crime Act 2017...
Children and Social Work Act 2017 (c. 12)
211.In Schedule 5 to the Children and Social Work Act...
Higher Education and Research Act 2017 (c. 29)
212.The Higher Education and Research Act 2017 is amended as...
213.(1) Section 63 (cooperation and information sharing by the Office...
214.(1) Section 112 (cooperation and information sharing between the Office...
215.The Digital Economy Act 2017 is amended as follows.
216.(1) Section 40 (further provisions about disclosures under sections 35...
217.(1) Section 43 (codes of practice) is amended as follows....
218.(1) Section 49 (further provision about disclosures under section 48)...
219.(1) Section 52 (code of practice) is amended as follows....
220.(1) Section 57 (further provision about disclosures under section 56)...
221.(1) Section 60 (code of practice) is amended as follows....
222.(1) Section 65 (supplementary provision about disclosures under section 64)...
223.(1) Section 70 (code of practice) is amended as follows....
224.Omit sections 108 to 110 (charges payable to the Information...
Landfill Disposals Tax (Wales) Act 2017 (anaw 3)
225.(1) Section 60 of the Landfill Disposals Tax (Wales) Act...
Additional Learning Needs and Educational Tribunal (Wales) Act 2018 (anaw 2)
226.(1) Section 4 of the Additional Learning Needs and Educational...
227.(1) Section 204 of this Act (meaning of “health professional”...
Estate Agents (Specified Offences) (No. 2) Order 1991 (S.I. 1991/1091)
228.In the table in the Schedule to the Estate Agents...
Channel Tunnel (International Arrangements) Order 1993 (S.I. 1993/1813)
229.(1) Article 4 of the Channel Tunnel (International Arrangements) Order...
230.The Access to Health Records (Northern Ireland) Order 1993 is...
231.In Article 4 (health professionals), for paragraph (1) substitute—
232.In Article 5(4)(a) (fees for access to health records), for...
233.In article 4 of the Channel Tunnel (Miscellaneous Provisions) Order...
European Primary and Specialist Dental Qualifications Regulations 1998 (S.I. 1998/811)
234.The European Primary and Specialist Dental Qualifications Regulations 1998 are...
235.(1) Regulation 2(1) (interpretation) is amended as follows.
236.(1) The table in Schedule A1 (functions of the GDC...
Scottish Parliamentary Corporate Body (Crown Status) Order 1999 (S.I. 1999/677)
237.For article 7 of the Scottish Parliamentary Corporate Body (Crown...
Northern Ireland Assembly Commission (Crown Status) Order 1999 (S.I. 1999/3145)
238.For article 9 of the Northern Ireland Assembly Commission (Crown...
Data Protection (Corporate Finance Exemption) Order 2000 (S.I. 2000/184)
239.The Data Protection (Corporate Finance Exemption) Order 2000 is revoked....
Data Protection (Conditions under Paragraph 3 of Part II of Schedule 1) Order 2000 (S.I. 2000/185)
240.The Data Protection (Conditions under Paragraph 3 of Part II...
Data Protection (Functions of Designated Authority) Order 2000 (S.I. 2000/186)
241.The Data Protection (Functions of Designated Authority) Order 2000 is...
Data Protection (International Co-operation) Order 2000 (S.I. 2000/190)
242.The Data Protection (International Co-operation) Order 2000 is revoked.
Data Protection (Subject Access) (Fees and Miscellaneous Provisions) Regulations 2000 (S.I. 2000/191)
243.The Data Protection (Subject Access) (Fees and Miscellaneous Provisions) Regulations...
Consumer Credit (Credit Reference Agency) Regulations 2000 (S.I. 2000/290)
244.In the Consumer Credit (Credit Reference Agency) Regulations 2000, regulation...
Data Protection (Subject Access Modification) (Health) Order 2000 (S.I. 2000/413)
245.The Data Protection (Subject Access Modification) (Health) Order 2000 is...
Data Protection (Subject Access Modification) (Education) Order 2000 (S.I. 2000/414)
246.The Data Protection (Subject Access Modification) (Education) Order 2000 is...
Data Protection (Subject Access Modification) (Social Work) Order 2000 (S.I. 2000/415)
247.The Data Protection (Subject Access Modification) (Social Work) Order 2000...
Data Protection (Crown Appointments) Order 2000 (S.I. 2000/416)
248.The Data Protection (Crown Appointments) Order 2000 is revoked.
Data Protection (Processing of Sensitive Personal Data) Order 2000 (S.I. 2000/417)
249.The Data Protection (Processing of Sensitive Personal Data) Order 2000...
Data Protection (Miscellaneous Subject Access Exemptions) Order 2000 (S.I. 2000/419)
250.The Data Protection (Miscellaneous Subject Access Exemptions) Order 2000 is...
Data Protection (Designated Codes of Practice) (No. 2) Order 2000 (S.I. 2000/1864)
251.The Data Protection (Designated Codes of Practice) (No. 2) Order...
252.The Representation of the People (England and Wales) Regulations 2001...
253.In regulation 3(1) (interpretation), at the appropriate places insert— “Article...
254.In regulation 26(3)(a) (applications for registration), for “the Data Protection...
255.In regulation 26A(2)(a) (application for alteration of register in respect...
256.In regulation 32ZA(3)(f) (annual canvass), for “the Data Protection Act...
257.In regulation 61A (conditions on the use, supply and inspection...
258.(1) Regulation 92(2) (interpretation and application of Part VI etc)...
259.In regulation 96(2A)(b)(i) (restriction on use of the full register),...
260.In regulation 97(5) and (6) (supply of free copy of...
261.In regulation 97A(7) and (8) (supply of free copy of...
262.In regulation 99(6) and (7) (supply of free copy of...
263.In regulation 109A(9) and (10) (supply of free copy of...
264.In regulation 119(2) (conditions on the use, supply and disclosure...
265.The Representation of the People (Scotland) Regulations 2001 are amended...
266.In regulation 3(1) (interpretation), at the appropriate places, insert— “Article...
267.In regulation 26(3)(a) (applications for registration), for “the Data Protection...
268.In regulation 26A(2)(a) (application for alteration of register in respect...
269.In regulation 32ZA(3)(f) (annual canvass), for “the Data Protection Act...
270.In regulation 61(3) (records and lists kept under Schedule 4),...
271.In regulation 61A (conditions on the use, supply and inspection...
272.(1) Regulation 92(2) (interpretation of Part VI etc) is amended...
273.In regulation 95(3)(b)(i) (restriction on use of the full register),...
274.In regulation 96(5) and (6) (supply of free copy of...
275.In regulation 98(6) and (7) (supply of free copy of...
276.In regulation 108A(9) and (10) (supply of full register to...
277.In regulation 119(2) (conditions on the use, supply and disclosure...
278.(1) Article 9 of the Financial Services and Markets 2000...
279.The Nursing and Midwifery Order 2001 is amended as follows....
280.(1) Article 3 (the Nursing and Midwifery Council and its...
281.(1) Article 25 (the Council's power to require disclosure of...
282.In article 39B (European professional card), after paragraph (2) insert—...
283.In article 40(6) (Directive 2005/36/EC: designation of competent authority etc),...
284.(1) Schedule 2B (Directive 2005/36/EC: European professional card) is amended...
285.(1) The table in Schedule 3 (functions of the Council...
286.In Schedule 4 (interpretation), omit the definition of “Directive 95/46/EC”....
Electronic Commerce (EC Directive) Regulations 2002 (S.I. 2002/2013)
287.Regulation 3 of the Electronic Commerce (EC Directive) Regulations 2002...
288.In paragraph (1)(b) for “the Data Protection Directive and the...
289.In paragraph (3)— (a) omit the definitions of “Data Protection...
Data Protection (Processing of Sensitive Personal Data) (Elected Representatives) Order 2002 (S.I. 2002/2905)
290.The Data Protection (Processing of Sensitive Personal Data) (Elected Representatives)...
291.The Privacy and Electronic Communications (EC Directive) Regulations 2003 are...
292.In regulation 2(1) (interpretation), in the definition of “the Information...
293.(1) Regulation 4 (relationship between these Regulations and the Data...
Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003 (S.I. 2003/2818)
294.The Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order...
295.In article 8(2) (exercise of powers by French officers in...
296.In article 11(4) (exercise of powers by UK immigration officers...
297.The Pupils' Educational Records (Scotland) Regulations 2003 are amended as...
298.(1) Regulation 2 (interpretation) is amended as follows.
299.(1) Regulation 6 (circumstances where information should not be disclosed)...
300.In regulation 9 (fees), for paragraph (1) substitute—
European Parliamentary Elections (Northern Ireland) Regulations 2004 (S.I. 2004/1267)
301.Schedule 1 to the European Parliamentary Elections (Northern Ireland) Regulations...
302.(1) Paragraph 74(1) (interpretation) is amended as follows.
303.In paragraph 77(2)(b) (conditions on the use, supply and disclosure...
Freedom of Information and Data Protection (Appropriate Limit and Fees) Regulations 2004 (S.I. 2004/3244)
304.In regulation 3(1) of the Freedom of Information and Data...
305.The Environmental Information Regulations 2004 are amended as follows.
306.(1) Regulation 2 (interpretation) is amended as follows.
307.(1) Regulation 13 (personal data) is amended as follows.
308.In regulation 14 (refusal to disclose information), in paragraph (3)(b),...
309.In regulation 18 (enforcement and appeal provisions), in paragraph (5),...
310.The Environmental Information (Scotland) Regulations 2004 are amended as follows....
311.(1) Regulation 2 (interpretation) is amended as follows.
312.(1) Regulation 11 (personal data) is amended as follows.
Licensing Act 2003 (Personal Licences) Regulations 2005 (S.I. 2005/41)
313.(1) Regulation 7 of the Licensing Act 2003 (Personal Licences)...
Education (Pupil Information) (England) Regulations 2005 (S.I. 2005/1437)
314.The Education (Pupil Information) (England) Regulations 2005 are amended as...
315.In regulation 3(5) (meaning of educational record) for “section 1(1)...
316.(1) Regulation 5 (disclosure of curricular and educational records) is...
Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005 (S.I. 2005/2042)
317.(1) Regulation 45 of the Civil Contingencies Act 2004 (Contingency...
Register of Judgments, Orders and Fines Regulations 2005 (S.I. 2005/3595)
318.In regulation 3 of the Register of Judgments, Orders and...
Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005 (S.S.I. 2005/494)
319.The Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005...
320.(1) Regulation 39 (sensitive information) is amended as follows.
Data Protection (Processing of Sensitive Personal Data) Order 2006 (S.I. 2006/2068)
321.The Data Protection (Processing of Sensitive Personal Data) Order 2006...
National Assembly for Wales (Representation of the People) Order 2007 (S.I. 2007/236)
322.(1) Paragraph 14 of Schedule 1 to the National Assembly...
Mental Capacity Act 2005 (Loss of Capacity during Research Project) (England) Regulations 2007 (S.I. 2007/679)
323.In regulation 3 of the Mental Capacity Act 2005 (Loss...
National Assembly for Wales Commission (Crown Status) Order 2007 (S.I. 2007/1118)
324.For article 5 of the National Assembly for Wales Commission...
Mental Capacity Act 2005 (Loss of Capacity during Research Project) (Wales) Regulations 2007 (S.I. 2007/837 (W.72))
325.In regulation 3 of the Mental Capacity Act 2005 (Loss...
Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007 (S.S.I. 2007/170)
326.(1) Regulation 18 of the Representation of the People (Absent...
Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007 (S.S.I. 2007/264)
327.In regulation 5 of the Representation of the People (Post-Local...
328.The Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland)...
329.In regulation 2 (interpretation), at the appropriate place insert— “the...
330.In regulation 10(2) (duties of Boards of Governors), for “documents...
Representation of the People (Northern Ireland) Regulations 2008 (S.I. 2008/1741)
331.In regulation 118 of the Representation of the People (Northern...
Companies Act 2006 (Extension of Takeover Panel Provisions) (Isle of Man) Order 2008 (S.I. 2008/3122)
332.In paragraph 1(c) of the Schedule to the Companies Act...
Controlled Drugs (Supervision of Management and Use) (Wales) Regulations 2008 (S.I. 2008/3239 (W.286))
333.The Controlled Drugs (Supervision of Management and Use) (Wales) Regulations...
334.In regulation 2(1) (interpretation)— (a) at the appropriate place in...
335.(1) Regulation 25 (duty to co-operate by disclosing information as...
336.(1) Regulation 26 (responsible bodies requesting additional information be disclosed...
337.(1) Regulation 29 (occurrence reports) is amended as follows.
Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008 (S.R. (N.I.) 2008 No. 3)
338.(1) Regulation 5 of the Energy Order 2003 (Supply of...
Companies (Disclosure of Address) Regulations 2009 (S.I. 2009/214)
339.(1) Paragraph 6 of Schedule 2 to the Companies (Disclosure...
Overseas Companies Regulations 2009 (S.I. 2009/1801)
340.(1) Paragraph 6 of Schedule 2 to the Overseas Companies...
Data Protection (Processing of Sensitive Personal Data) Order 2009 (S.I. 2009/1811)
341.The Data Protection (Processing of Sensitive Personal Data) Order 2009...
Provision of Services Regulations 2009 (S.I. 2009/2999)
342.In regulation 25 of the Provision of Services Regulations 2009...
INSPIRE Regulations 2009 (S.I. 2009/3157)
343.(1) Regulation 9 of the INSPIRE Regulations 2009 (public access...
INSPIRE (Scotland) Regulations 2009 (S.S.I. 2009/440)
344.(1) Regulation 10 of the INSPIRE (Scotland) Regulations 2009 (public...
Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009 (S.R (N.I.) 2009 No. 225)
345.The Controlled Drugs (Supervision of Management and Use) Regulations (Northern...
346.In regulation 2(2) (interpretation), at the appropriate place insert— “the...
347.(1) Regulation 25 (duty to co-operate by disclosing information as...
348.(1) Regulation 26 (responsible bodies requesting additional information be disclosed...
349.(1) Regulation 29 (occurrence reports) is amended as follows.
Data Protection (Monetary Penalties) (Maximum Penalty and Notices) Regulations 2010 (S.I. 2010/31)
350.The Data Protection (Monetary Penalties) (Maximum Penalty and Notices) Regulations...
Pharmacy Order 2010 (S.I. 2010/231)
351.The Pharmacy Order 2010 is amended as follows.
352.In article 3(1) (interpretation), omit the definition of “Directive 95/46/EC”....
353.(1) Article 9 (inspection and enforcement) is amended as follows....
354.In article 33A (European professional card), after paragraph (2) insert—...
355.(1) Article 49 (disclosure of information: general) is amended as...
356.(1) Article 55 (professional performance assessments) is amended as follows....
357.In article 67(6) (Directive 2005/36/EC: designation of competent authority etc.),...
358.(1) Schedule 2A (Directive 2005/36/EC: European professional card) is amended...
359.(1) The table in Schedule 3 (Directive 2005/36/EC: designation of...
Data Protection (Monetary Penalties) Order 2010 (S.I. 2010/910)
360.The Data Protection (Monetary Penalties) Order 2010 is revoked.
National Employment Savings Trust Order 2010 (S.I. 2010/917)
361.The National Employment Savings Trust Order 2010 is amended as...
362.In article 2 (interpretation)— (a) omit the definition of “data”...
363.(1) Article 10 (disclosure of requested data to the Secretary...
Local Elections (Northern Ireland) Order 2010 (S.I. 2010/2977)
364.(1) Schedule 3 to the Local Elections (Northern Ireland) Order...
365.(1) Regulation 5 of the Pupil Information (Wales) Regulations 2011...
Debt Arrangement Scheme (Scotland) Regulations 2011 (S.S.I. 2011/141)
366.In Schedule 4 to the Debt Arrangement Scheme (Scotland) Regulations...
367.The Police and Crime Commissioner Elections Order 2012 is amended...
368.(1) Schedule 2 (absent voting in Police and Crime Commissioner...
369.(1) Schedule 10 (access to marked registers and other documents...
Data Protection (Processing of Sensitive Personal Data) Order 2012 (S.I. 2012/1978)
370.The Data Protection (Processing of Sensitive Personal Data) Order 2012...
371.Schedule 6 to the Neighbourhood Planning (Referendums) Regulations 2012 (registering...
372.(1) Paragraph 29(1) (interpretation of Part 8) is amended as...
373.In paragraph 32(3)(b)(i), for “section 11(3) of the Data Protection...
374.In paragraph 33(6) and (7) (supply of copy of business...
375.In paragraph 34(6) and (7) (supply of copy of business...
376.In paragraph 39(8) and (97) (supply of copy of business...
377.In paragraph 45(2) (conditions on the use, supply and disclosure...
Controlled Drugs (Supervision of Management and Use) Regulations 2013 (S.I. 2013/373)
378.(1) Regulation 20 of the Controlled Drugs (Supervision of Management...
Communications Act 2003 (Disclosure of Information) Order 2014 (S.I. 2014/1825)
379.(1) Article 3 of the Communications Act 2003 (Disclosure of...
Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141)
380.In the Criminal Justice and Data Protection (Protocol No. 36)...
381.The Data Protection (Assessment Notices) (Designation of National Health Service...
The Control of Explosives Precursors etc Regulations (Northern Ireland) 2014 (S.R. (N.I.) 2014 No. 224)
382.In regulation 6 of the Control of Explosives Precursors etc...
Control of Poisons and Explosives Precursors Regulations 2015 (S.I. 2015/966)
383.In regulation 3 of the Control of Poisons and Explosives...
Companies (Disclosure of Date of Birth Information) Regulations 2015 (S.I. 2015/1694)
384.(1) Paragraph 6 of Schedule 2 to the Companies (Disclosure...
Small and Medium Sized Business (Credit Information) Regulations 2015 (S.I. 2015/1945)
385.The Small and Medium Sized Business (Credit Information) Regulations 2015...
386.(1) Regulation 12 (criteria for the designation of a credit...
387.(1) Regulation 15 (access to and correction of information for...
388.The European Union (Recognition of Professional Qualifications) Regulations 2015 are...
389.(1) Regulation 2(1) (interpretation) is amended as follows.
390.In regulation 5(5) (functions of competent authorities in the United...
391.In regulation 45(3) (processing and access to data regarding the...
392.In regulation 46(1) (processing and access to data regarding the...
393.In regulation 48(2) (processing and access to data regarding the...
394.In regulation 66(3) (exchange of information), for “Directives 95/46/EC” substitute...
Scottish Parliament (Elections etc) Order 2015 (S.S.I. 2015/425)
395.The Scottish Parliament (Elections etc) Order 2015 is amended as...
396.(1) Schedule 3 (absent voting) is amended as follows.
397.(1) Schedule 8 (access to marked registers and other documents...
398.In paragraph 1(3) of Schedule 3 to the Recall of...
Register of People with Significant Control Regulations 2016 (S.I. 2016/339)
399.Schedule 4 to the Register of People with Significant Control...
400.(1) Paragraph 6 (disclosure to a credit reference agency) is...
401.In paragraph 12A (disclosure to a credit institution or a...
402.In Part 3 (interpretation), after paragraph 13 insert— In this Schedule, “data protection obligations”, in relation to a...
403.The Electronic Identification and Trust Services for Electronic Transactions Regulations...
404.In regulation 2(1) (interpretation), omit the definition of “the 1998...
405.In regulation 3(3) (supervision), omit “under the 1998 Act”.
406.For Schedule 2 substitute— SCHEDULE 2 Information Commissioner's enforcement powers...
Court Files Privileged Access Rules (Northern Ireland) 2016 (S.R. (N.I.) 2016 No. 123)
407.The Court Files Privileged Access Rules (Northern Ireland) 2016 are...
408.In rule 5 (information that may released) for “Schedule 1...
409.In rule 7(2) (provision of information) for “Schedule 1 of...
410.The Money Laundering, Terrorist Financing and Transfer of Funds (Information...
411.In regulation 3(1) (interpretation), at the appropriate places insert— “the...
412.In regulation 16(8) (risk assessment by the Treasury and Home...
413.In regulation 17(9) (risk assessment by supervisory authorities), for “the...
414.For regulation 40(9)(c) (record keeping) substitute— (c) “data subject” has...
415.(1) Regulation 41 (data protection) is amended as follows.
416.(1) Regulation 84 (publication: the Financial Conduct Authority) is amended...
417.(1) Regulation 85 (publication: the Commissioners) is amended as follows....
418.For regulation 106(a) (general restrictions) substitute— (a) a disclosure in...
419.After paragraph 27 of Schedule 3 (relevant offences) insert— An offence under the Data Protection Act 2018, apart from...
Scottish Partnerships (Register of People with Significant Control) Regulations 2017 (S.I. 2017/694)
420.(1) Paragraph 6 of Schedule 5 to the Scottish Partnerships...
Data Protection (Charges and Information) Regulations 2018 (S.I. 2018/480)
421.In regulation 1(2) of the Data Protection (Charges and Information)...
422.The National Health Service (General Medical Services Contracts) (Scotland) Regulations...
423.(1) Regulation 1 (citation and commencement) is amended as follows....
424.In regulation 3(1) (interpretation)— (a) omit the definition of “the...
425.(1) Schedule 6 (other contractual terms) is amended as follows....
National Health Service (Primary Medical Services Section 17C Agreements) (Scotland) Regulations 2018 (S.S.I. 2018/67)
426.The National Health Service (Primary Medical Services Section 17C Agreements)...
427.(1) Regulation 1 (citation and commencement) is amended as follows....
428.In regulation 3(1) (interpretation)— (a) omit the definition of “the...
429.(1) Schedule 1 (content of agreements) is amended as follows....
430.(1) Unless the context otherwise requires, legislation described in sub-paragraph...
431.(1) References to a particular provision of, or made under,...
Specific modification of references to terms used in the Data Protection Act 1998
432.(1) References to personal data, and to the processing of...
433.Section 3(14) does not apply to this Schedule.
Provision inserted in subordinate legislation by this Schedule
434.Provision inserted into subordinate legislation by this Schedule may be...
Transitional provision etc
1.(1) In this Schedule— “the 1984 Act” means the Data...
2.(1) The repeal of sections 7 to 9A of the...
3.(1) The repeal of section 10 of the 1998 Act...
4.(1) The repeal of section 11 of the 1998 Act...
5.(1) The repeal of section 12 of the 1998 Act...
6.(1) The repeal of section 13 of the 1998 Act...
7.(1) The repeal of section 14(1) to (3) and (6)...
8.The repeal of section 15 of the 1998 Act (jurisdiction...
9.(1) The repeal of Part 4 of the 1998 Act...
10.(1) In Schedule 18 to this Act, references to a...
11.In section 185 of this Act, references to a record...
12.In paragraph 20(2) of Schedule 2 to this Act (self-incrimination),...
13.Until the first regulations under section 24(8) of this Act...
14.(1) In relation to an automated processing system set up...
15.Nothing in this Schedule, read with the revocation of regulation...
16.Until the first regulations under section 94(4)(b) of this Act...
17.(1) The repeal of section 28(2) to (12) of the...
18.(1) This paragraph applies to a certificate issued under section...
19.(1) On and after the relevant day, the individual who...
20.(1) The repeal of paragraph 10 of Schedule 5 to...
21.(1) The repeal of section 52(1) of the 1998 Act...
22.(1) The repeal of Schedule 5 to the 1998 Act...
23.Paragraph 10 of Schedule 12 to this Act applies only...
24.(1) The repeal of section 54(2) of the 1998 Act...
25.(1) The repeal of section 54(3) of the 1998 Act...
26.(1) The Data Protection (Charges and Information) Regulations 2018 (S.I....
27.(1) The repeal of section 42 of the 1998 Act...
28.(1) The repeal of section 52E of the 1998 Act...
29.(1) In this Part of this Schedule, references to contravention...
30.(1) The repeal of section 43 of the 1998 Act...
31.(1) The repeal of section 44 of the 1998 Act...
32.(1) The repeal of sections 41A and 41B of the...
33.(1) The repeal of sections 40 and 41 of the...
34.(1) The repeal of section 45 of the 1998 Act...
35.(1) The repeal of section 46 of the 1998 Act...
36.(1) The repeal of sections 47, 60 and 61 of...
37.(1) The repeal of sections 50, 60 and 61 of,...
38.(1) The repeal of sections 55A, 55B, 55D and 55E...
39.(1) The repeal of sections 48 and 49 of the...
40.(1) The repeal of section 28 of the 1998 Act...
41.(1) The repeal of paragraph 7 of Schedule 6 to...
42.(1) The repeal of paragraph 8 of Schedule 6 to...
43.(1) The references in the preceding paragraphs of this Part...
44.In section 143 of this Act— (a) the reference to...
45.In paragraph 16 of Schedule 15 to this Act (powers...
46.(1) Tribunal Procedure Rules made under paragraph 7(1)(a) of Schedule...
47.(1) The following provisions (as amended by Schedule 19 to...
Codes etc required to be consistent with the Commissioner's data-sharing code
48.(1) This paragraph applies in relation to the code of...
49.(1) This paragraph applies in relation to the original statement...
50.In section 159(1)(a) of the Consumer Credit Act 1974 (correction...
51.Paragraphs 52 to 55 make provision about the Freedom of...
52.(1) This paragraph applies where a request for information was...
53.(1) Tribunal Procedure Rules made under paragraph 7(1)(b) of Schedule...
54.(1) The repeal of paragraph 8 of Schedule 6 to...
55.(1) The amendment of section 77 of the 2000 Act...
56.(1) This paragraph applies where a request for information was...
57.Until the first regulations under Article 5(4)(a) of the Access...
58.(1) The repeal of a provision of the 1998 Act...
59.Part 3 of Schedule 19 to this Act (modifications) does...
60.(1) This paragraph applies where a request for information was...
61.(1) This paragraph applies where a request for information was...