http://www.legislation.gov.uk/ukpga/1998/29/section/21/2000-03-01Data Protection Act 1998An Act to make new provision for the regulation of the processing of information relating to individuals, including the obtaining, holding, use or disclosure of such information.1998-07-16texttext/xmlenStatute Law Database2026-02-092000-03-01 Data Protection Act 1998s. 20(2)(aa)Coroners and Justice Act 2009Sch. 20 para. 4(c)s. 180s. 182(5)Data Protection Act 1998Sch. 1 Pt. 2 para. 5(b) and wordDigital Economy Act 2017s. 111(5)s. 118(6)Data Protection Act 1998s. 31(4)(a)(va)Justice Act (Northern Ireland) 2016Sch. 3 para. 13s. 61(2)Data Protection Act 1998s. 55(2)(ca)Criminal Justice and Immigration Act 2008s. 78Sch. 27 para. 28s. 153(7) Part III211If section 17(1) is contravened, the data controller is guilty of an offence.2Any person who fails to comply with the duty imposed by notification regulations made by virtue of section 20(1) is guilty of an offence.3It shall be a defence for a person charged with an offence under subsection (2) to show that he exercised all due diligence to comply with the duty.