Royal arms

F1Data Protection Act 1998

1998 CHAPTER 29

An Act to make new provision for the regulation of the processing of information relating to individuals, including the obtaining, holding, use or disclosure of such information.

Be it enacted by the Queen’s most Excellent Majesty, by and with the advice and consent of the Lords Spiritual and Temporal, and Commons, in this present Parliament assembled, and by the authority of the same, as follows:—

F1Part I Preliminary

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Part II Rights of data subjects and others

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Part III Notification by data controllers

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Part IV Exemptions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 Part V Enforcement

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Part VI Miscellaneous and General

F1 Functions of Commissioner

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 Unlawful obtaining et ceteralaetc. of personal data

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Monetary penalties

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 Records obtained under data subject’s right of access

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 Information provided to Commissioner or Tribunal

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 General provisions relating to offences

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Amendments of Consumer Credit Act 1974

62 Amendments of Consumer Credit Act 1974.

(1)

In section 158 of the M1Consumer Credit Act 1974 (duty of agency to disclose filed information)—

(a)

in subsection (1)—

(i)

in paragraph (a) for “individual” there is substituted “ partnership or other unincorporated body of persons not consisting entirely of bodies corporate ”, and

(ii)

for “him” there is substituted “ it ”,

(b)

in subsection (2), for “his” there is substituted “ the consumer’s ”, and

(c)

in subsection (3), for “him” there is substituted “ the consumer ”.

(2)

In section 159 of that Act (correction of wrong information) for subsection (1) there is substituted—

“(1)

Any individual (the “objector”) given—

(a)

information under section 7 of the Data Protection Act 1998 by a credit reference agency, or

(b)

information under section 158,

who considers that an entry in his file is incorrect, and that if it is not corrected he is likely to be prejudiced, may give notice to the agency requiring it either to remove the entry from the file or amend it.”

(3)

In subsections (2) to (6) of that section—

(a)

for “consumer”, wherever occurring, there is substituted “ objector ”, and

(b)

for “Director”, wherever occurring, there is substituted “ the relevant authority ”.

(4)

After subsection (6) of that section there is inserted—

“(7)

The Data Protection Commissioner may vary or revoke any order made by him under this section.

(8)

In this section “the relevant authority” means—

(a)

where the objector is a partnership or other unincorporated body of persons, the Director, and

(b)

in any other case, the Data Protection Commissioner.”

(5)

In section 160 of that Act (alternative procedure for business consumers)—

(a)

in subsection (4)—

(i)

for “him” there is substituted “ to the consumer ”, and

(ii)

in paragraphs (a) and (b) for “he” there is substituted “ the consumer ” and for “his” there is substituted “ the consumer’s ”, and

(b)

after subsection (6) there is inserted—

“(7)

In this section “consumer” has the same meaning as in section 158.”

F1 General

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SCHEDULES

F1SCHEDULE 1 The data protection principles

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 2 Conditions relevant for purposes of the first principle: processing of any personal data

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 3 Conditions relevant for purposes of the first principle: processing of sensitive personal data

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 4 Cases where the eighth principle does not apply

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 5 The Data Protection Commissioner . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 SCHEDULE 6 Appeal proceedings

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 7 Miscellaneous exemptions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 8 Transitional relief

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 SCHEDULE 9 Powers of entry and inspection

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 10 Further provisions relating to assistance under section 53

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 11 Educational records

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 12 Accessible public records

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 13 Modifications of Act having effect before 24th October 2007

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1SCHEDULE 14 Transitional provisions and savings

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SCHEDULE 15 Minor and consequential amendments

Section 74(1).

F1Public Records Act 1958 (c. 51)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Parliamentary Commissioner Act 1967 (c. 13)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Superannuation Act 1972 (c. 11)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1House of Commons Disqualification Act 1975 (c. 24)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Northern Ireland Assembly Disqualification Act 1975 (c. 25)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Representation of the People Act 1983 (c. 2)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 Access to Medical Reports Act 1988 (c. 28)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Football Spectators Act 1989 (c. 37)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Education (Student Loans) Act 1990 (c. 6)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Access to Health Records Act 1990 (c. 23)

F111

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F112

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

13

In section 5(3) of that Act (cases where right of access may be partially excluded) for the words from the beginning to “record” in the first place where it occurs there is substituted “ Access shall not be given under section 3(2) to any part of a health record ”.

F1Access to Personal Files and Medical Reports (Northern Ireland) Order 1991 (1991/1707 (N.I. 14))

F114

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

15

In Article 6(1) of that Order (interpretation), in the definition of “health professional”, for “the Data Protection (Subject Access Modification) (Health) Order 1987” there is substituted “ the Data Protection Act 1998 ”.

Tribunals and Inquiries Act 1992 (c. 53)

16

In Part 1 of Schedule 1 to the Tribunals and Inquiries Act 1992 (tribunals under direct supervision of Council on Tribunals), for paragraph 14 there is substituted—

“Data protection

14.

(a) The Data Protection Commissioner appointed under section 6 of the Data Protection Act 1998;

(b) the Data Protection Tribunal constituted under that section, in respect of its jurisdiction under section 48 of that Act.”

F1Access to Health Records (Northern Ireland) Order 1993 (1993/1250 (N.I. 4))

F117

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

18

In Article 5(4) of that Order (cases where fee may be required) in sub-paragraph (a), for “the maximum prescribed under section 21 of the Data Protection Act 1984” there is substituted “ such maximum as may be prescribed for the purposes of this Article by regulations under section 7 of the Data Protection Act 1998 ”.

19

In Article 7 of that Order (cases where right of access may be partially excluded) for the words from the beginning to “record” in the first place where it occurs there is substituted “ Access shall not be given under Article 5(2) to any part of a health record ”.

F1SCHEDULE 16 Repeals and revocations

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .