- Latest available (Revised)
- Original (As enacted)
Data Protection Act 2018 is up to date with all changes known to be in force on or before 25 September 2023. There are changes that may be brought into force at a future date.
Revised legislation carried on this site may not be fully up to date. Changes and effects are recorded by our editorial team in lists which can be found in the ‘Changes to Legislation’ area. Where those effects have yet to be applied to the text of the legislation by the editorial team they are also listed alongside the affected provisions when you open the content using the Table of Contents below.
You searched for provisions that are applicable to Scotland. The matching provisions are highlighted below. Where no highlighting is shown the matching result may be contained within a footnote.
PART 2 General processingPrevious MatchNext Match
CHAPTER 2 The UK GDPRPrevious MatchNext Match
Meaning of certain terms used in the UK GDPR Previous MatchNext Match
Transfers of personal data to third countries etcPrevious MatchNext Match
17A.Transfers based on adequacy regulationsPrevious MatchNext Match
17B.Transfers based on adequacy regulations: review etcPrevious MatchNext Match
17C.Standard data protection clausesPrevious MatchNext Match
18.Transfers of personal data to third countries etc : public interestPrevious MatchNext Match
CHAPTER 3 Exemptions for manual unstructured processing and for national security and defence purposesPrevious MatchNext Match
Exemptions etcPrevious MatchNext Match
24.Manual unstructured data held by FOI public authoritiesPrevious MatchNext Match
25.Manual unstructured data used in longstanding historical researchPrevious MatchNext Match
26.National security and defence exemptionPrevious MatchNext Match
28.National security and defence: modifications to Articles 9 and 32 of the UK GDPR Previous MatchNext Match
PART 3 Law enforcement processingPrevious MatchNext Match
CHAPTER 1 Scope and definitionsPrevious MatchNext Match
CHAPTER 2 PrinciplesPrevious MatchNext Match
34.Overview and general duty of controllerPrevious MatchNext Match
35.The first data protection principlePrevious MatchNext Match
36.The second data protection principlePrevious MatchNext Match
37.The third data protection principlePrevious MatchNext Match
38.The fourth data protection principlePrevious MatchNext Match
39.The fifth data protection principlePrevious MatchNext Match
40.The sixth data protection principlePrevious MatchNext Match
CHAPTER 3 Rights of the data subjectPrevious MatchNext Match
CHAPTER 4 Controller and processorPrevious MatchNext Match
General obligationsPrevious MatchNext Match
56.General obligations of the controllerPrevious MatchNext Match
57.Data protection by design and defaultPrevious MatchNext Match
60.Processing under the authority of the controller or processorPrevious MatchNext Match
63.Co-operation with the CommissionerPrevious MatchNext Match
64.Data protection impact assessmentPrevious MatchNext Match
65.Prior consultation with the CommissionerPrevious MatchNext Match
Obligations relating to personal data breachesPrevious MatchNext Match
CHAPTER 5 Transfers of personal data to third countries etcPrevious MatchNext Match
General principles for transfersPrevious MatchNext Match
73.General principles for transfers of personal dataPrevious MatchNext Match
74.Transfers on the basis of an adequacy decisionPrevious MatchNext Match
74A.Transfers based on adequacy regulationsPrevious MatchNext Match
74B.Transfers based on adequacy regulations: review etcPrevious MatchNext Match
75.Transfers on the basis of appropriate safeguardsPrevious MatchNext Match
76.Transfers on the basis of special circumstancesPrevious MatchNext Match
PART 4 Intelligence services processingPrevious MatchNext Match
CHAPTER 2 PrinciplesPrevious MatchNext Match
The data protection principlesPrevious MatchNext Match
86.The first data protection principlePrevious MatchNext Match
87.The second data protection principlePrevious MatchNext Match
88.The third data protection principlePrevious MatchNext Match
89.The fourth data protection principlePrevious MatchNext Match
90.The fifth data protection principlePrevious MatchNext Match
91.The sixth data protection principlePrevious MatchNext Match
CHAPTER 3 Rights of the data subjectPrevious MatchNext Match
CHAPTER 5 Transfers of personal data outside the United KingdomPrevious MatchNext Match
PART 5 The Information CommissionerPrevious MatchNext Match
Codes of practicePrevious MatchNext Match
124.Data protection and journalism codePrevious MatchNext Match
125.Approval of codes prepared under sections 121 to 124Previous MatchNext Match
126.Publication and review of codes issued under section 125(4)Previous MatchNext Match
127.Effect of codes issued under section 125(4)Previous MatchNext Match
Records of national security certificatesPrevious MatchNext Match
Information provided to the CommissionerPrevious MatchNext Match
PART 6 EnforcementPrevious MatchNext Match
Information notices and assessment notices: destruction of documents etcPrevious MatchNext Match
Offences relating to personal dataPrevious MatchNext Match
170.Unlawful obtaining etc of personal dataPrevious MatchNext Match
171.Re-identification of de-identified personal dataPrevious MatchNext Match
172.Re-identification: effectiveness testing conditionsPrevious MatchNext Match
173.Alteration etc of personal data to prevent disclosure to data subjectPrevious MatchNext Match
The special purposesPrevious MatchNext Match
175.Provision of assistance in special purposes proceedingsPrevious MatchNext Match
176.Staying special purposes proceedingsPrevious MatchNext Match
177.Guidance about how to seek redress against media organisationsPrevious MatchNext Match
178.Review of processing of personal data for the purposes of journalismPrevious MatchNext Match
179.Effectiveness of the media's dispute resolution proceduresPrevious MatchNext Match
PART 7 Supplementary and final provisionPrevious MatchNext Match
Changes to the Data Protection ConventionPrevious MatchNext Match
Representation of data subjectsPrevious MatchNext Match
187.Representation of data subjects with their authorityPrevious MatchNext Match
188.Representation of data subjects with their authority: collective proceedings
189.Duty to review provision for representation of data subjects
190.Post-review powers to make provision about representation of data subjects
Framework for Data Processing by GovernmentPrevious MatchNext Match
Data-sharing: HMRC and reserve forcesPrevious MatchNext Match
SCHEDULES
SCHEDULE 1Previous MatchNext Match
Special categories of personal data and criminal convictions etc dataPrevious MatchNext Match
PART 1 Conditions relating to employment, health and research etcPrevious MatchNext Match
PART 2 Substantial public interest conditionsPrevious MatchNext Match
Requirement for an appropriate policy document when relying on conditions in this PartPrevious MatchNext Match
Statutory etc and government purposesPrevious MatchNext Match
Administration of justice and parliamentary purposesPrevious MatchNext Match
Equality of opportunity or treatmentPrevious MatchNext Match
Racial and ethnic diversity at senior levels of organisationsPrevious MatchNext Match
Preventing or detecting unlawful actsPrevious MatchNext Match
Protecting the public against dishonesty etcPrevious MatchNext Match
Regulatory requirements relating to unlawful acts and dishonesty etcPrevious MatchNext Match
Journalism etc in connection with unlawful acts and dishonesty etcPrevious MatchNext Match
Suspicion of terrorist financing or money launderingPrevious MatchNext Match
Support for individuals with a particular disability or medical conditionPrevious MatchNext Match
Safeguarding of children and of individuals at riskPrevious MatchNext Match
Safeguarding of economic well-being of certain individualsPrevious MatchNext Match
Elected representatives responding to requestsPrevious MatchNext Match
Disclosure to elected representativesPrevious MatchNext Match
Informing elected representatives about prisonersPrevious MatchNext Match
PART 3 Additional conditions relating to criminal convictions etcPrevious MatchNext Match
PART 4 Appropriate policy document and additional safeguardsPrevious MatchNext Match
Application of this Part of this SchedulePrevious MatchNext Match
Requirement to have an appropriate policy document in placePrevious MatchNext Match
Additional safeguard: retention of appropriate policy documentPrevious MatchNext Match
Additional safeguard: record of processingPrevious MatchNext Match
SCHEDULE 2Previous MatchNext Match
Exemptions etc from the UK GDPR Previous MatchNext Match
PART 1 Adaptations and restrictions as described in Articles 6(3) and 23(1)Previous MatchNext Match
UK GDPR provisions to be adapted or restricted: “the listed GDPR provisions”Previous MatchNext Match
Crime and taxation: risk assessment systemsPrevious MatchNext Match
Immigration: additional safeguard: decisions for the purposes of paragraph 4(1) and requirement to have regard to immigration exemption policy documentPrevious MatchNext Match
Immigration: additional safeguard: record etc of decision that exemption appliesPrevious MatchNext Match
Information required to be disclosed by law etc or in connection with legal proceedingsPrevious MatchNext Match
PART 2 Restrictions as described in Article 23(1): restrictions of rules in Articles 13 to 21 and 34Previous MatchNext Match
UK GDPR provisions to be restricted: “the listed GDPR provisions”Previous MatchNext Match
Functions designed to protect the public etcPrevious MatchNext Match
Regulatory functions relating to legal services, the health service and children's servicesPrevious MatchNext Match
Regulatory functions of certain other personsPrevious MatchNext Match
Judicial appointments, judicial independence and judicial proceedingsPrevious MatchNext Match
Crown honours, dignities and appointmentsPrevious MatchNext Match
PART 3 Restriction for the protection of rights of othersPrevious MatchNext Match
PART 4 Restrictions as described in Article 23(1): restrictions of rules in Articles 13 to 15Previous MatchNext Match
PART 5 Exemptions etc based on Article 85(2) for reasons of freedom of expression and informationPrevious MatchNext Match
PART 6 Derogations etc based on Article 89 for research, statistics and archivingPrevious MatchNext Match
SCHEDULE 3Previous MatchNext Match
Exemptions etc from the UK GDPR: health, social work, education and child abuse dataPrevious MatchNext Match
PART 1 UK GDPR provisions to be restrictedPrevious MatchNext Match
PART 2 Health dataPrevious MatchNext Match
Exemption from the listed GDPR provisions: data processed by a courtPrevious MatchNext Match
Exemption from the listed GDPR provisions: data subject's expectations and wishesPrevious MatchNext Match
Exemption from Article 15 of the UK GDPR: serious harmPrevious MatchNext Match
Restriction of Article 15 of the UK GDPR: prior opinion of appropriate health professionalPrevious MatchNext Match
PART 3 Social work dataPrevious MatchNext Match
Exemption from the listed GDPR provisions: data processed by a courtPrevious MatchNext Match
Exemption from the listed GDPR provisions: data subject's expectations and wishesPrevious MatchNext Match
Exemption from Article 15 of the UK GDPR: serious harmPrevious MatchNext Match
Restriction of Article 15 of the UK GDPR: prior opinion of Principal ReporterPrevious MatchNext Match
PART 4 Education dataPrevious MatchNext Match
Educational recordsPrevious MatchNext Match
13.In this Part of this Schedule “educational record” means a...Previous MatchNext Match
14.(1) This paragraph applies to a record of information which—...Previous MatchNext Match
15.(1) This paragraph applies to a record of information which...Previous MatchNext Match
16.(1) This paragraph applies to a record of information which—...Previous MatchNext Match
Exemption from the listed GDPR provisions: data processed by a courtPrevious MatchNext Match
Exemption from Article 15 of the UK GDPR: serious harmPrevious MatchNext Match
Restriction of Article 15 of the UK GDPR: prior opinion of Principal ReporterPrevious MatchNext Match
SCHEDULE 4Previous MatchNext Match
Exemptions etc from the UK GDPR: disclosure prohibited or restricted by an enactmentPrevious MatchNext Match
UK GDPR provisions to be restricted: “the listed GDPR provisions”Previous MatchNext Match
Human fertilisation and embryology informationPrevious MatchNext Match
Statements of special educational needsPrevious MatchNext Match
Information provided by Principal Reporter for children's hearingPrevious MatchNext Match
SCHEDULE 5Previous MatchNext Match
Accreditation of certification providers: reviews and appealsPrevious MatchNext Match
SCHEDULE 6Previous MatchNext Match
The applied GDPR and the applied Chapter 2Previous MatchNext Match
PART 1 Modifications to the GDPRPrevious MatchNext Match
References to the GDPR and its provisionsPrevious MatchNext Match
References to Union law and Member State lawPrevious MatchNext Match
References to the Union and to Member StatesPrevious MatchNext Match
References to supervisory authoritiesPrevious MatchNext Match
References to the national parliamentPrevious MatchNext Match
Chapter I of the GDPR (general provisions)Previous MatchNext Match
7.For Article 2 (material scope) substitute— This Regulation applies to the processing of personal data to...Previous MatchNext Match
8.For Article 3 substitute— Article 3 Territorial application Subsections (1),...Previous MatchNext Match
9.In Article 4 (definitions)— (a) in paragraph (7) (meaning of...Previous MatchNext Match
Chapter II of the GDPR (principles)Previous MatchNext Match
10.In Article 6 (lawfulness of processing)— (a) omit paragraph 2;...Previous MatchNext Match
11.In Article 8 (conditions applicable to child's consent in relation...Previous MatchNext Match
12.In Article 9 (processing of special categories of personal data)—...Previous MatchNext Match
13.In Article 10 (processing of personal data relating to criminal...Previous MatchNext Match
Section 1 of Chapter III of the GDPR (rights of the data subject: transparency and modalities)Previous MatchNext Match
Section 2 of Chapter III of the GDPR (rights of the data subject: information and access to personal data)Previous MatchNext Match
Section 3 of Chapter III of the GDPR (rights of the data subject: rectification and erasure)Previous MatchNext Match
Section 4 of Chapter III of the GDPR (rights of the data subject: right to object and automated individual decision-making)Previous MatchNext Match
Section 5 of Chapter III of the GDPR (rights of the data subject: restrictions)Previous MatchNext Match
Section 1 of Chapter IV of the GDPR (controller and processor: general obligations)Previous MatchNext Match
22.In Article 26 (joint controllers), in paragraph 1, for “Union...Previous MatchNext Match
23.Omit Article 27 (representatives of controllers or processors not established...Previous MatchNext Match
24.In Article 28 (processor)— (a) in paragraph 3, in point...Previous MatchNext Match
25.In Article 30 (records of processing activities)— Previous MatchNext Match
26.In Article 31 (co-operation with the supervisory authority), omit “and,...Previous MatchNext Match
Section 3 of Chapter IV of the GDPR (controller and processor: data protection impact assessment and prior consultation)Previous MatchNext Match
Section 4 of Chapter IV of the GDPR (controller and processor: data protection officer)Previous MatchNext Match
Section 5 of Chapter IV of the GDPR (controller and processor: codes of conduct and certification)Previous MatchNext Match
31.In Article 40 (codes of conduct)— (a) in paragraph 1,...Previous MatchNext Match
32.In Article 41 (monitoring of approved codes of conduct), omit...Previous MatchNext Match
33.In Article 42 (certification)— (a) in paragraph 1— Previous MatchNext Match
34.In Article 43 (certification bodies)— (a) in paragraph 1, in...Previous MatchNext Match
Chapter V of the GDPR (transfers of data to third countries or international organisations)Previous MatchNext Match
35.In Article 45 (transfers on the basis of an adequacy...Previous MatchNext Match
36.In Article 46 (transfers subject to appropriate safeguards)— Previous MatchNext Match
37.In Article 47 (binding corporate rules)— (a) in paragraph 1,...Previous MatchNext Match
38.In Article 49 (derogations for specific situations)— Previous MatchNext Match
39.In Article 50 (international co-operation for the protection of personal...Previous MatchNext Match
Section 1 of Chapter VI of the GDPR (independent supervisory authorities: independent status)Previous MatchNext Match
40.In Article 51 (supervisory authority)— (a) in paragraph 1— Previous MatchNext Match
41.In Article 52 (independence)— (a) in paragraph 2— Previous MatchNext Match
42.Omit Article 53 (general conditions for the members of the...Previous MatchNext Match
43.Omit Article 54 (rules on the establishment of the supervisory...Previous MatchNext Match
Section 2 of Chapter VI of the GDPR (independent supervisory authorities: competence, tasks and powers)Previous MatchNext Match
44.In Article 55 (competence)— (a) in paragraph 1, omit “on...Previous MatchNext Match
45.Omit Article 56 (competence of the lead supervisory authority). Previous MatchNext Match
46.In Article 57 (tasks)— (a) in paragraph 1, in the...Previous MatchNext Match
47.In Article 58 (powers)— (a) in paragraph 1, in point...Previous MatchNext Match
48.In Article 59 (activity reports)— (a) for “, the government...Previous MatchNext Match
Chapter VII of the GDPR (co-operation and consistency)Previous MatchNext Match
Chapter VIII of the GDPR (remedies, liability and penalties)Previous MatchNext Match
50.In Article 77 (right to lodge a complaint with a...Previous MatchNext Match
51.In Article 78 (right to an effective judicial remedy against...Previous MatchNext Match
52.In Article 79 (right to an effective judicial remedy against...Previous MatchNext Match
53.In Article 80 (representation of data subjects)— Previous MatchNext Match
54.Omit Article 81 (suspension of proceedings). Previous MatchNext Match
55.In Article 82 (right to compensation and liability), for paragraph...Previous MatchNext Match
56.In Article 83 (general conditions for imposing administrative fines)— Previous MatchNext Match
57.In Article 84 (penalties)— (a) for paragraph 1 substitute— The rules on other penalties applicable to infringements of this...Previous MatchNext Match
Chapter IX of the GDPR (provisions relating to specific processing situations)Previous MatchNext Match
58.In Article 85 (processing and freedom of expression and information)—...Previous MatchNext Match
59.In Article 86 (processing and public access to official documents),...Previous MatchNext Match
60.Omit Article 87 (processing of national identification number). Previous MatchNext Match
61.Omit Article 88 (processing in the context of employment). Previous MatchNext Match
62.In Article 89 (safeguards and derogations relating to processing for...Previous MatchNext Match
63.Omit Article 90 (obligations of secrecy). Previous MatchNext Match
64.Omit Article 91 (existing data protection rules of churches and...Previous MatchNext Match
Chapter X of the GDPR (delegated acts and implementing acts)Previous MatchNext Match
Chapter XI of the GDPR (final provisions)Previous MatchNext Match
67.Omit Article 94 (repeal of Directive 95/46/EC). Previous MatchNext Match
68.Omit Article 95 (relationship with Directive 2002/58/EC). Previous MatchNext Match
69.In Article 96 (relationship with previously concluded Agreements), for “by...Previous MatchNext Match
70.Omit Article 97 (Commission reports). Previous MatchNext Match
71.Omit Article 98 (Commission reviews). Previous MatchNext Match
72.Omit Article 99 (entry into force and application). Previous MatchNext Match
PART 2 Modifications to Chapter 2 of Part 2Previous MatchNext Match
SCHEDULE 7Previous MatchNext Match
Competent authoritiesPrevious MatchNext Match
1.Any United Kingdom government department other than a non-ministerial government...Previous MatchNext Match
Chief officers of police and other policing bodiesPrevious MatchNext Match
5.The chief constable of a police force maintained under section...Previous MatchNext Match
6.The Commissioner of Police of the Metropolis. Previous MatchNext Match
7.The Commissioner of Police for the City of London. Previous MatchNext Match
8.The Chief Constable of the Police Service of Northern Ireland....Previous MatchNext Match
9.The chief constable of the Police Service of Scotland. Previous MatchNext Match
10.The chief constable of the British Transport Police. Previous MatchNext Match
11.The chief constable of the Civil Nuclear Constabulary. Previous MatchNext Match
12.The chief constable of the Ministry of Defence Police. Previous MatchNext Match
13.The Provost Marshal of the Royal Navy Police. Previous MatchNext Match
14.The Provost Marshal of the Royal Military Police. Previous MatchNext Match
15.The Provost Marshal of the Royal Air Force Police. Previous MatchNext Match
15A.The Provost Marshal for serious crime. Previous MatchNext Match
16.The chief officer of— (a) a body of constables appointed...Previous MatchNext Match
17.A body established in accordance with a collaboration agreement under...Previous MatchNext Match
18.The Director General of the Independent Office for Police Conduct....Previous MatchNext Match
18A.The Service Police Complaints Commissioner. Previous MatchNext Match
19.The Police Investigations and Review Commissioner. Previous MatchNext Match
20.The Police Ombudsman for Northern Ireland. Previous MatchNext Match
Other authorities with investigatory functionsPrevious MatchNext Match
21.The Commissioners for Her Majesty's Revenue and Customs. Previous MatchNext Match
24.The Director General of the National Crime Agency. Previous MatchNext Match
25.The Director of the Serious Fraud Office. Previous MatchNext Match
27.The Financial Conduct Authority. Previous MatchNext Match
28.The Health and Safety Executive. Previous MatchNext Match
29.The Competition and Markets Authority. Previous MatchNext Match
30.The Gas and Electricity Markets Authority. Previous MatchNext Match
34.The Criminal Cases Review Commission. Previous MatchNext Match
35.The Scottish Criminal Cases Review Commission. Previous MatchNext Match
Authorities with functions relating to offender managementPrevious MatchNext Match
36.A provider of probation services (other than the Secretary of...Previous MatchNext Match
37.The Youth Justice Board for England and Wales. Previous MatchNext Match
38.The Parole Board for England and Wales. Previous MatchNext Match
40.The Parole Commissioners for Northern Ireland. Previous MatchNext Match
41.The Probation Board for Northern Ireland. Previous MatchNext Match
42.The Prisoner Ombudsman for Northern Ireland. Previous MatchNext Match
43.A person who has entered into a contract for the...Previous MatchNext Match
44.A person who has entered into a contract with the...Previous MatchNext Match
45.A person who is, under or by virtue of any...Previous MatchNext Match
46.A youth offending team established under section 39 of the...Previous MatchNext Match
Other authoritiesPrevious MatchNext Match
47.The Director of Public Prosecutions. Previous MatchNext Match
48.The Director of Public Prosecutions for Northern Ireland. Previous MatchNext Match
51.The Director of Service Prosecutions. Previous MatchNext Match
53.The Scottish Information Commissioner. Previous MatchNext Match
54.The Scottish Courts and Tribunal Service. Previous MatchNext Match
SCHEDULE 8Previous MatchNext Match
Conditions for sensitive processing under Part 3Previous MatchNext Match
SCHEDULE 9Previous MatchNext Match
Conditions for processing under Part 4Previous MatchNext Match
1.The data subject has given consent to the processing. Previous MatchNext Match
2.The processing is necessary— (a) for the performance of a...Previous MatchNext Match
3.The processing is necessary for compliance with a legal obligation...Previous MatchNext Match
4.The processing is necessary in order to protect the vital...Previous MatchNext Match
5.The processing is necessary— (a) for the administration of justice,...Previous MatchNext Match
6.(1) The processing is necessary for the purposes of legitimate...Previous MatchNext Match
SCHEDULE 10Previous MatchNext Match
Conditions for sensitive processing under Part 4Previous MatchNext Match
Right or obligation relating to employmentPrevious MatchNext Match
Safeguarding of children and of individuals at riskPrevious MatchNext Match
Data already published by data subjectPrevious MatchNext Match
Administration of justice, parliamentary, statutory etc and government purposesPrevious MatchNext Match
SCHEDULE 11Previous MatchNext Match
SCHEDULE 12Previous MatchNext Match
SCHEDULE 13Previous MatchNext Match
Other general functions of the CommissionerPrevious MatchNext Match
SCHEDULE 14Previous MatchNext Match
Co-operation and mutual assistancePrevious MatchNext Match
PART 2 Data Protection ConventionPrevious MatchNext Match
Co-operation between the Commissioner and foreign designated authoritiesPrevious MatchNext Match
Assisting persons resident outside the UK with requests under Article 14 of the ConventionPrevious MatchNext Match
Assisting UK residents with requests under Article 8 of the ConventionPrevious MatchNext Match
SCHEDULE 15Previous MatchNext Match
Powers of entry and inspectionPrevious MatchNext Match
Issue of warrants in connection with non-compliance and offencesPrevious MatchNext Match
Issue of warrants in connection with assessment noticesPrevious MatchNext Match
Restrictions on issuing warrants: processing for the special purposesPrevious MatchNext Match
Restrictions on issuing warrants: procedural requirementsPrevious MatchNext Match
Execution of warrants: reasonable forcePrevious MatchNext Match
Execution of warrants: time when executedPrevious MatchNext Match
Execution of warrants: occupier of premisesPrevious MatchNext Match
Execution of warrants: seizure of documents etcPrevious MatchNext Match
Matters exempt from inspection and seizure: privileged communicationsPrevious MatchNext Match
Matters exempt from inspection and seizure: Parliamentary privilegePrevious MatchNext Match
SCHEDULE 16Previous MatchNext Match
PenaltiesPrevious MatchNext Match
SCHEDULE 17Previous MatchNext Match
Review of processing of personal data for the purposes of journalismPrevious MatchNext Match
SCHEDULE 18Previous MatchNext Match
SCHEDULE 19Previous MatchNext Match
Minor and consequential amendmentsPrevious MatchNext Match
PART 1 Amendments of primary legislationPrevious MatchNext Match
Registration Service Act 1953 (c. 37)Previous MatchNext Match
Veterinary Surgeons Act 1966 (c. 36)Previous MatchNext Match
Parliamentary Commissioner Act 1967 (c. 13)Previous MatchNext Match
Consumer Credit Act 1974 (c. 39)Previous MatchNext Match
7.The Consumer Credit Act 1974 is amended as follows. Previous MatchNext Match
8.In section 157(2A) (duty to disclose name etc of agency)—...Previous MatchNext Match
9.In section 159(1)(a) (correction of wrong information) for “section 7...Previous MatchNext Match
10.In section 189(1) (definitions), at the appropriate place insert— “the...Previous MatchNext Match
Pharmacy (Northern Ireland) Order 1976 (S.I. 1976/1213 (N.I. 22))Previous MatchNext Match
11.The Pharmacy (Northern Ireland) Order 1976 is amended as follows....Previous MatchNext Match
12.In article 2(2) (interpretation), omit the definition of “Directive 95/46/EC”....Previous MatchNext Match
13.In article 8D (European professional card), after paragraph (3) insert—...Previous MatchNext Match
14.In article 22A(6) (Directive 2005/36/EC: functions of competent authority etc.),...Previous MatchNext Match
15.(1) Schedule 2C (Directive 2005/36/EC: European professional card) is amended...Previous MatchNext Match
16.(1) The table in Schedule 2D (functions of the Society...Previous MatchNext Match
17.(1) Paragraph 2 of Schedule 3 (fitness to practice: disclosure...Previous MatchNext Match
Representation of the People Act 1983 (c. 2)Previous MatchNext Match
Medical Act 1983 (c. 54)Previous MatchNext Match
19.The Medical Act 1983 is amended as follows. Previous MatchNext Match
20.(1) Section 29E (evidence) is amended as follows. Previous MatchNext Match
21.(1) Section 35A (General Medical Council's power to require disclosure...Previous MatchNext Match
22.In section 49B(7) (Directive 2005/36: designation of competent authority etc.),...Previous MatchNext Match
23.In section 55(1) (interpretation), omit the definition of “Directive 95/46/EC”....Previous MatchNext Match
24.(1) Paragraph 9B of Schedule 1 (incidental powers of the...Previous MatchNext Match
25.(1) Paragraph 5A of Schedule 4 (professional performance assessments and...Previous MatchNext Match
26.(1) The table in Schedule 4A (functions of the General...Previous MatchNext Match
Dentists Act 1984 (c. 24)Previous MatchNext Match
27.The Dentists Act 1984 is amended as follows. Previous MatchNext Match
28.(1) Section 33B (the General Dental Council's power to require...Previous MatchNext Match
29.In section 36ZA(6) (Directive 2005/36: designation of competent authority etc),...Previous MatchNext Match
30.(1) Section 36Y (the General Dental Council's power to require...Previous MatchNext Match
31.In section 53(1) (interpretation), omit the definition of “Directive 95/46/EC”....Previous MatchNext Match
32.(1) The table in Schedule 4ZA (Directive 2005/36: functions of...Previous MatchNext Match
Access to Medical Reports Act 1988 (c. 28)Previous MatchNext Match
Access to Health Records Act 1990 (c. 23)Previous MatchNext Match
Human Fertilisation and Embryology Act 1990 (c. 37)Previous MatchNext Match
Trade Union and Labour Relations (Consolidation) Act 1992 (c. 52)Previous MatchNext Match
Tribunals and Inquiries Act 1992 (c. 53)Previous MatchNext Match
Industrial Relations (Northern Ireland) Order 1992 (S.I. 1992/807 (N.I. 5))Previous MatchNext Match
Health Service Commissioners Act 1993 (c. 46)Previous MatchNext Match
Immigration and Asylum Act 1999 (c. 33)Previous MatchNext Match
Financial Services and Markets Act 2000 (c. 8)Previous MatchNext Match
48.The Financial Services and Markets Act 2000 is amended as...Previous MatchNext Match
49.In section 86(9) (exempt offers to the public), for “the...Previous MatchNext Match
50.In section 391A(6)(b) (publication: special provisions relating to the capital...Previous MatchNext Match
51.In section 391C(7)(a) (publication: special provisions relating to the UCITS...Previous MatchNext Match
52.In section 391D(9)(a) (publication: special provisions relating to the markets...Previous MatchNext Match
53.In section 417 (definitions), at the appropriate place insert— “the...Previous MatchNext Match
Freedom of Information Act 2000 (c. 36)Previous MatchNext Match
55.The Freedom of Information Act 2000 is amended as follows....Previous MatchNext Match
56.In section 2(3) (absolute exemptions), for paragraph (f) substitute— Previous MatchNext Match
57.In section 18 (the Information Commissioner), omit subsection (1). Previous MatchNext Match
58.(1) Section 40 (personal information) is amended as follows. Previous MatchNext Match
59.Omit section 49 (reports to be laid before Parliament). Previous MatchNext Match
60.For section 61 (appeal proceedings) substitute— Appeal proceedings (1) Tribunal Procedure Rules may make provision for regulating the...Previous MatchNext Match
61.In section 76(1) (disclosure of information between Commissioner and ombudsmen),...Previous MatchNext Match
62.After section 76A insert— Disclosure of information to Tribunal (1) No enactment or rule of law prohibiting or restricting...Previous MatchNext Match
63.In section 77(1)(b) (offence of altering etc records with intent...Previous MatchNext Match
64.In section 84 (interpretation), at the appropriate place insert— “the...Previous MatchNext Match
Political Parties, Elections and Referendums Act 2000 (c. 41)Previous MatchNext Match
Public Finance and Accountability (Scotland) Act 2000 (asp 1)Previous MatchNext Match
66.The Public Finance and Accountability (Scotland) Act 2000 is amended...Previous MatchNext Match
67.In section 26B(3)(a) (voluntary disclosure of data to Audit Scotland),...Previous MatchNext Match
68.In section 26C(3)(a) (power to require disclosure of data), for...Previous MatchNext Match
69.In section 29(1) (interpretation), at the appropriate place insert— “the...Previous MatchNext Match
Criminal Justice and Police Act 2001 (c. 16)Previous MatchNext Match
70.The Criminal Justice and Police Act 2001 is amended as...Previous MatchNext Match
71.In section 57(1) (retention of seized items)— Previous MatchNext Match
72.In section 65(7) (meaning of “legal privilege”)— Previous MatchNext Match
73.In Schedule 1 (powers of seizure)— (a) omit paragraph 65,...Previous MatchNext Match
Anti-terrorism, Crime and Security Act 2001 (c.24)Previous MatchNext Match
Health and Personal Social Services Act (Northern Ireland) 2001 (c. 3 (N.I.))Previous MatchNext Match
Justice (Northern Ireland) Act 2002 (c. 26)Previous MatchNext Match
Proceeds of Crime Act 2002 (c. 29)Previous MatchNext Match
79.The Proceeds of Crime Act 2002 is amended as follows....Previous MatchNext Match
80.In section 333C(2)(d) (other permitted disclosures between institutions etc), for...Previous MatchNext Match
81.In section 436(3)(a) (disclosure of information to certain Directors), for...Previous MatchNext Match
82.In section 438(8)(a) (disclosure of information by certain Directors), for...Previous MatchNext Match
83.In section 439(3)(a) (disclosure of information to Lord Advocate and...Previous MatchNext Match
84.In section 441(7)(a) (disclosure of information by Lord Advocate and...Previous MatchNext Match
85.After section 442 insert— Data protection legislation In this Part, “the data protection legislation” has the same...Previous MatchNext Match
Scottish Public Services Ombudsman Act 2002 (asp 11)Previous MatchNext Match
Freedom of Information (Scotland) Act 2002 (asp 13)Previous MatchNext Match
Mental Health (Care and Treatment) (Scotland) Act 2003 (asp 13)Previous MatchNext Match
Public Audit (Wales) Act 2004 (c. 23)Previous MatchNext Match
Companies (Audit, Investigations and Community Enterprise) Act 2004 (c. 27)Previous MatchNext Match
100.The Companies (Audit, Investigations and Community Enterprise) Act 2004 is...Previous MatchNext Match
101.(1) Section 15A (disclosure of information by tax authorities) is...Previous MatchNext Match
102.(1) Section 15D (permitted disclosure of information obtained under compulsory...Previous MatchNext Match
Domestic Violence, Crime and Victims Act 2004 (c. 28)Previous MatchNext Match
Constitutional Reform Act 2005 (c. 4)Previous MatchNext Match
Public Services Ombudsman (Wales) Act 2005 (c. 10)Previous MatchNext Match
Commissioners for Revenue and Customs Act 2005 (c. 11)Previous MatchNext Match
Commissioner for Older People (Wales) Act 2006 (c. 30)Previous MatchNext Match
National Health Service Act 2006 (c. 41)Previous MatchNext Match
113.The National Health Service Act 2006 is amended as follows....Previous MatchNext Match
114.(1) Section 251 (control of patient information) is amended as...Previous MatchNext Match
115.(1) Section 264C (provision and disclosure of information about health...Previous MatchNext Match
116.In paragraph 7B(3) of Schedule 1 (further provision about the...Previous MatchNext Match
National Health Service (Wales) Act 2006 (c. 42)Previous MatchNext Match
Companies Act 2006 (c. 46)Previous MatchNext Match
120.The Companies Act 2006 is amended as follows. Previous MatchNext Match
121.In section 458(2) (disclosure of information by tax authorities)— Previous MatchNext Match
122.In section 461(7) (permitted disclosure of information obtained under compulsory...Previous MatchNext Match
123.In section 948(9) (restrictions on disclosure) for “the Data Protection...Previous MatchNext Match
124.In section 1173(1) (minor definitions: general), at the appropriate place...Previous MatchNext Match
125.In section 1224A(7) (restrictions on disclosure), for “the Data Protection...Previous MatchNext Match
126.In section 1253D(3) (restriction on transfer of audit working papers...Previous MatchNext Match
127.In section 1261(1) (minor definitions: Part 42), at the appropriate...Previous MatchNext Match
128.In section 1262 (index of defined expressions: Part 42), at...Previous MatchNext Match
129.In Schedule 8 (index of defined expressions: general), at the...Previous MatchNext Match
Tribunals, Courts and Enforcement Act 2007 (c. 15)Previous MatchNext Match
Statistics and Registration Service Act 2007 (c. 18)Previous MatchNext Match
133.The Statistics and Registration Service Act 2007 is amended as...Previous MatchNext Match
134.(1) Section 45 (information held by HMRC) is amended as...Previous MatchNext Match
135.(1) Section 45A (information held by other public authorities) is...Previous MatchNext Match
136.(1) Section 45B(3) (access to information held by Crown bodies...Previous MatchNext Match
137.(1) Section 45C(13) (power to require disclosures by other public...Previous MatchNext Match
138.In section 45D(9)(b) (power to require disclosure by undertakings), for...Previous MatchNext Match
139.(1) Section 45E (further provision about powers in sections 45B,...Previous MatchNext Match
140.(1) Section 53A (disclosure by the Statistics Board to devolved...Previous MatchNext Match
141.(1) Section 54 (Data Protection Act 1998 and Human Rights...Previous MatchNext Match
142.In section 67 (general interpretation: Part 1), at the appropriate...Previous MatchNext Match
Serious Crime Act 2007 (c. 27)Previous MatchNext Match
143.The Serious Crime Act 2007 is amended as follows. Previous MatchNext Match
144.(1) Section 5A (verification and disclosure of information) is amended...Previous MatchNext Match
145.(1) Section 68 (disclosure of information to prevent fraud) is...Previous MatchNext Match
146.(1) Section 85 (disclosure of information by Revenue and Customs)...Previous MatchNext Match
Adoption and Children (Scotland) Act 2007 (asp 4)Previous MatchNext Match
Criminal Justice and Immigration Act 2008 (c. 4)Previous MatchNext Match
Regulatory Enforcement and Sanctions Act 2008 (c. 13)Previous MatchNext Match
Health and Social Care Act 2008 (c. 14)Previous MatchNext Match
Public Health etc. (Scotland) Act 2008 (asp 5)Previous MatchNext Match
Borders, Citizenship and Immigration Act 2009 (c. 11)Previous MatchNext Match
Marine and Coastal Access Act 2009 (c. 23)Previous MatchNext Match
Coroners and Justice Act 2009 (c. 25)Previous MatchNext Match
Health and Social Care (Reform) Act (Northern Ireland) 2009 (c. 1 (N.I.))Previous MatchNext Match
Terrorist Asset-Freezing etc. Act 2010 (c. 38)Previous MatchNext Match
Welsh Language (Wales) Measure 2011 (nawm 1)Previous MatchNext Match
Safeguarding Board Act (Northern Ireland) 2011 (c. 7 (N.I))Previous MatchNext Match
Health and Social Care Act 2012 (c. 7)Previous MatchNext Match
171.The Health and Social Care Act 2012 is amended as...Previous MatchNext Match
172.In section 250(7) (power to publish information standards), for the...Previous MatchNext Match
173.(1) Section 251A (consistent identifiers) is amended as follows. Previous MatchNext Match
174.(1) Section 251B (duty to share information) is amended as...Previous MatchNext Match
Protection of Freedoms Act 2012 (c. 9)Previous MatchNext Match
175.The Protection of Freedoms Act 2012 is amended as follows....Previous MatchNext Match
176.(1) Section 27 (exceptions and further provision about consent and...Previous MatchNext Match
177.In section 28(1) (interpretation: Chapter 2), for the definition of...Previous MatchNext Match
178.In section 29(7) (code of practice for surveillance camera systems),...Previous MatchNext Match
Marine Act (Northern Ireland) 2013 (c. 10 (N.I.))Previous MatchNext Match
Local Audit and Accountability Act 2014 (c. 2)Previous MatchNext Match
Anti-social Behaviour, Crime and Policing Act 2014 (c. 12)Previous MatchNext Match
Social Services and Well-being (Wales) Act 2014 (anaw 4)Previous MatchNext Match
Counter-Terrorism and Security Act 2015 (c. 6)Previous MatchNext Match
Small Business, Enterprise and Employment Act 2015 (c. 26)Previous MatchNext Match
Human Trafficking and Exploitation (Criminal Justice and Support for Victims) Act (Northern Ireland) 2015 (c. 2 (N.I.))Previous MatchNext Match
192.The Human Trafficking and Exploitation (Criminal Justice and Support for...Previous MatchNext Match
193.In section 13(5) (duty to notify National Crime Agency about...Previous MatchNext Match
194.In section 25(1) (interpretation of this Act), at the appropriate...Previous MatchNext Match
195.In paragraph 18(5) of Schedule 3 (supply of information to...Previous MatchNext Match
Justice Act (Northern Ireland) 2015 (c. 9 (N.I.))Previous MatchNext Match
Investigatory Powers Act 2016 (c. 25)Previous MatchNext Match
198.The Investigatory Powers Act 2016 is amended as follows. Previous MatchNext Match
199.In section 1(5)(b), for sub-paragraph (ii) substitute— Previous MatchNext Match
200.In section 199 (bulk personal datasets: interpretation), for subsection (2)...Previous MatchNext Match
201.In section 202(4) (restriction on use of class BPD warrants),...Previous MatchNext Match
202.In section 206 (additional safeguards for health records), for subsection...Previous MatchNext Match
203.(1) Section 237 (information gateway) is amended as follows. Previous MatchNext Match
Public Services Ombudsman Act (Northern Ireland) 2016 (c. 4 (N.I.))Previous MatchNext Match
Health and Social Care (Control of Data Processing) Act (Northern Ireland) 2016 (c. 12 (N.I.))Previous MatchNext Match
Mental Capacity Act (Northern Ireland) 2016 (c. 18 (N.I.))Previous MatchNext Match
Justice Act (Northern Ireland) 2016 (c. 21 (N.I.))Previous MatchNext Match
Children and Social Work Act 2017 (c. 12)Previous MatchNext Match
Higher Education and Research Act 2017 (c. 29)Previous MatchNext Match
Digital Economy Act 2017 (c. 30)Previous MatchNext Match
215.The Digital Economy Act 2017 is amended as follows. Previous MatchNext Match
216.(1) Section 40 (further provisions about disclosures under sections 35...Previous MatchNext Match
217.(1) Section 43 (codes of practice) is amended as follows....Previous MatchNext Match
218.(1) Section 49 (further provision about disclosures under section 48)...Previous MatchNext Match
219.(1) Section 52 (code of practice) is amended as follows....Previous MatchNext Match
220.(1) Section 57 (further provision about disclosures under section 56)...Previous MatchNext Match
221.(1) Section 60 (code of practice) is amended as follows....Previous MatchNext Match
222.(1) Section 65 (supplementary provision about disclosures under section 64)...Previous MatchNext Match
223.(1) Section 70 (code of practice) is amended as follows....Previous MatchNext Match
224.Omit sections 108 to 110 (charges payable to the Information...Previous MatchNext Match
Landfill Disposals Tax (Wales) Act 2017 (anaw 3)Previous MatchNext Match
Additional Learning Needs and Educational Tribunal (Wales) Act 2018 (anaw 2)Previous MatchNext Match
PART 2 Amendments of other legislationPrevious MatchNext Match
Estate Agents (Specified Offences) (No. 2) Order 1991 (S.I. 1991/1091)Previous MatchNext Match
Channel Tunnel (International Arrangements) Order 1993 (S.I. 1993/1813)Previous MatchNext Match
Access to Health Records (Northern Ireland) Order 1993 (S.I. 1993/1250 (N.I. 4))Previous MatchNext Match
Channel Tunnel (Miscellaneous Provisions) Order 1994 (S.I. 1994/1405)Previous MatchNext Match
European Primary and Specialist Dental Qualifications Regulations 1998 (S.I. 1998/811)Previous MatchNext Match
Scottish Parliamentary Corporate Body (Crown Status) Order 1999 (S.I. 1999/677)Previous MatchNext Match
Northern Ireland Assembly Commission (Crown Status) Order 1999 (S.I. 1999/3145)Previous MatchNext Match
Data Protection (Corporate Finance Exemption) Order 2000 (S.I. 2000/184)Previous MatchNext Match
Data Protection (Conditions under Paragraph 3 of Part II of Schedule 1) Order 2000 (S.I. 2000/185)Previous MatchNext Match
Data Protection (Functions of Designated Authority) Order 2000 (S.I. 2000/186)Previous MatchNext Match
Data Protection (International Co-operation) Order 2000 (S.I. 2000/190)Previous MatchNext Match
Data Protection (Subject Access) (Fees and Miscellaneous Provisions) Regulations 2000 (S.I. 2000/191)Previous MatchNext Match
Consumer Credit (Credit Reference Agency) Regulations 2000 (S.I. 2000/290)Previous MatchNext Match
Data Protection (Subject Access Modification) (Health) Order 2000 (S.I. 2000/413)Previous MatchNext Match
Data Protection (Subject Access Modification) (Education) Order 2000 (S.I. 2000/414)Previous MatchNext Match
Data Protection (Subject Access Modification) (Social Work) Order 2000 (S.I. 2000/415)Previous MatchNext Match
Data Protection (Crown Appointments) Order 2000 (S.I. 2000/416)Previous MatchNext Match
Data Protection (Processing of Sensitive Personal Data) Order 2000 (S.I. 2000/417)Previous MatchNext Match
Data Protection (Miscellaneous Subject Access Exemptions) Order 2000 (S.I. 2000/419)Previous MatchNext Match
Data Protection (Designated Codes of Practice) (No. 2) Order 2000 (S.I. 2000/1864)Previous MatchNext Match
Representation of the People (England and Wales) Regulations 2001 (S.I. 2001/341)Previous MatchNext Match
252.The Representation of the People (England and Wales) Regulations 2001...Previous MatchNext Match
253.In regulation 3(1) (interpretation), at the appropriate places insert— “Article...Previous MatchNext Match
254.In regulation 26(3)(a) (applications for registration), for “the Data Protection...Previous MatchNext Match
255.In regulation 26A(2)(a) (application for alteration of register in respect...Previous MatchNext Match
256.In regulation 32ZA(3)(f) (annual canvass), for “the Data Protection Act...Previous MatchNext Match
257.In regulation 61A (conditions on the use, supply and inspection...Previous MatchNext Match
258.(1) Regulation 92(2) (interpretation and application of Part VI etc)...Previous MatchNext Match
259.In regulation 96(2A)(b)(i) (restriction on use of the full register),...Previous MatchNext Match
260.In regulation 97(5) and (6) (supply of free copy of...Previous MatchNext Match
261.In regulation 97A(7) and (8) (supply of free copy of...Previous MatchNext Match
262.In regulation 99(6) and (7) (supply of free copy of...Previous MatchNext Match
263.In regulation 109A(9) and (10) (supply of free copy of...Previous MatchNext Match
264.In regulation 119(2) (conditions on the use, supply and disclosure...Previous MatchNext Match
Representation of the People (Scotland) Regulations 2001 (S.I. 2001/497)Previous MatchNext Match
265.The Representation of the People (Scotland) Regulations 2001 are amended...Previous MatchNext Match
266.In regulation 3(1) (interpretation), at the appropriate places, insert— “Article...Previous MatchNext Match
267.In regulation 26(3)(a) (applications for registration), for “the Data Protection...Previous MatchNext Match
268.In regulation 26A(2)(a) (application for alteration of register in respect...Previous MatchNext Match
269.In regulation 32ZA(3)(f) (annual canvass), for “the Data Protection Act...Previous MatchNext Match
270.In regulation 61(3) (records and lists kept under Schedule 4),...Previous MatchNext Match
271.In regulation 61A (conditions on the use, supply and inspection...Previous MatchNext Match
272.(1) Regulation 92(2) (interpretation of Part VI etc) is amended...Previous MatchNext Match
273.In regulation 95(3)(b)(i) (restriction on use of the full register),...Previous MatchNext Match
274.In regulation 96(5) and (6) (supply of free copy of...Previous MatchNext Match
275.In regulation 98(6) and (7) (supply of free copy of...Previous MatchNext Match
276.In regulation 108A(9) and (10) (supply of full register to...Previous MatchNext Match
277.In regulation 119(2) (conditions on the use, supply and disclosure...Previous MatchNext Match
Financial Services and Markets Act 2000 (Disclosure of Confidential Information) Regulations 2001 (S.I. 2001/2188)Previous MatchNext Match
Nursing and Midwifery Order 2001 (S.I. 2002/253)Previous MatchNext Match
279.The Nursing and Midwifery Order 2001 is amended as follows....Previous MatchNext Match
280.(1) Article 3 (the Nursing and Midwifery Council and its...Previous MatchNext Match
281.(1) Article 25 (the Council's power to require disclosure of...Previous MatchNext Match
282.In article 39B (European professional card), after paragraph (2) insert—...Previous MatchNext Match
283.In article 40(6) (Directive 2005/36/EC: designation of competent authority etc),...Previous MatchNext Match
284.(1) Schedule 2B (Directive 2005/36/EC: European professional card) is amended...Previous MatchNext Match
285.(1) The table in Schedule 3 (functions of the Council...Previous MatchNext Match
286.In Schedule 4 (interpretation), omit the definition of “Directive 95/46/EC”....Previous MatchNext Match
Electronic Commerce (EC Directive) Regulations 2002 (S.I. 2002/2013)Previous MatchNext Match
Data Protection (Processing of Sensitive Personal Data) (Elected Representatives) Order 2002 (S.I. 2002/2905)Previous MatchNext Match
Privacy and Electronic Communications (EC Directive) Regulations 2003 (S.I. 2003/2426)Previous MatchNext Match
291.The Privacy and Electronic Communications (EC Directive) Regulations 2003 are...Previous MatchNext Match
292.In regulation 2(1) (interpretation), in the definition of “the Information...Previous MatchNext Match
293.(1) Regulation 4 (relationship between these Regulations and the Data...Previous MatchNext Match
Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003 (S.I. 2003/2818)Previous MatchNext Match
Pupils' Educational Records (Scotland) Regulations 2003 (S.S.I. 2003/581)Previous MatchNext Match
297.The Pupils' Educational Records (Scotland) Regulations 2003 are amended as...Previous MatchNext Match
298.(1) Regulation 2 (interpretation) is amended as follows. Previous MatchNext Match
299.(1) Regulation 6 (circumstances where information should not be disclosed)...Previous MatchNext Match
300.In regulation 9 (fees), for paragraph (1) substitute— Previous MatchNext Match
European Parliamentary Elections (Northern Ireland) Regulations 2004 (S.I. 2004/1267)Previous MatchNext Match
Freedom of Information and Data Protection (Appropriate Limit and Fees) Regulations 2004 (S.I. 2004/3244)Previous MatchNext Match
Environmental Information Regulations 2004 (S.I. 2004/3391)Previous MatchNext Match
305.The Environmental Information Regulations 2004 are amended as follows. Previous MatchNext Match
306.(1) Regulation 2 (interpretation) is amended as follows. Previous MatchNext Match
307.(1) Regulation 13 (personal data) is amended as follows. Previous MatchNext Match
308.In regulation 14 (refusal to disclose information), in paragraph (3)(b),...Previous MatchNext Match
309.In regulation 18 (enforcement and appeal provisions), in paragraph (5),...Previous MatchNext Match
Environmental Information (Scotland) Regulations 2004 (S.S.I. 2004/520)Previous MatchNext Match
Licensing Act 2003 (Personal Licences) Regulations 2005 (S.I. 2005/41)Previous MatchNext Match
Education (Pupil Information) (England) Regulations 2005 (S.I. 2005/1437)Previous MatchNext Match
314.The Education (Pupil Information) (England) Regulations 2005 are amended as...Previous MatchNext Match
315.In regulation 3(5) (meaning of educational record) for “section 1(1)...Previous MatchNext Match
316.(1) Regulation 5 (disclosure of curricular and educational records) is...Previous MatchNext Match
Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005 (S.I. 2005/2042)Previous MatchNext Match
Register of Judgments, Orders and Fines Regulations 2005 (S.I. 2005/3595)Previous MatchNext Match
Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005 (S.S.I. 2005/494)Previous MatchNext Match
Data Protection (Processing of Sensitive Personal Data) Order 2006 (S.I. 2006/2068)Previous MatchNext Match
National Assembly for Wales (Representation of the People) Order 2007 (S.I. 2007/236)Previous MatchNext Match
Mental Capacity Act 2005 (Loss of Capacity during Research Project) (England) Regulations 2007 (S.I. 2007/679)Previous MatchNext Match
National Assembly for Wales Commission (Crown Status) Order 2007 (S.I. 2007/1118)Previous MatchNext Match
Mental Capacity Act 2005 (Loss of Capacity during Research Project) (Wales) Regulations 2007 (S.I. 2007/837 (W.72))Previous MatchNext Match
Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007 (S.S.I. 2007/170)Previous MatchNext Match
Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007 (S.S.I. 2007/264)Previous MatchNext Match
Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007 (S.R. (N.I.) 2007 No. 43)Previous MatchNext Match
328.The Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland)...Previous MatchNext Match
329.In regulation 2 (interpretation), at the appropriate place insert— “the...Previous MatchNext Match
330.In regulation 10(2) (duties of Boards of Governors), for “documents...Previous MatchNext Match
Representation of the People (Northern Ireland) Regulations 2008 (S.I. 2008/1741)Previous MatchNext Match
Companies Act 2006 (Extension of Takeover Panel Provisions) (Isle of Man) Order 2008 (S.I. 2008/3122)Previous MatchNext Match
Controlled Drugs (Supervision of Management and Use) (Wales) Regulations 2008 (S.I. 2008/3239 (W.286))Previous MatchNext Match
333.The Controlled Drugs (Supervision of Management and Use) (Wales) Regulations...Previous MatchNext Match
334.In regulation 2(1) (interpretation)— (a) at the appropriate place in...Previous MatchNext Match
335.(1) Regulation 25 (duty to co-operate by disclosing information as...Previous MatchNext Match
336.(1) Regulation 26 (responsible bodies requesting additional information be disclosed...Previous MatchNext Match
337.(1) Regulation 29 (occurrence reports) is amended as follows. Previous MatchNext Match
Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008 (S.R. (N.I.) 2008 No. 3)Previous MatchNext Match
Companies (Disclosure of Address) Regulations 2009 (S.I. 2009/214)Previous MatchNext Match
Overseas Companies Regulations 2009 (S.I. 2009/1801)Previous MatchNext Match
Data Protection (Processing of Sensitive Personal Data) Order 2009 (S.I. 2009/1811)Previous MatchNext Match
Provision of Services Regulations 2009 (S.I. 2009/2999)Previous MatchNext Match
INSPIRE Regulations 2009 (S.I. 2009/3157)Previous MatchNext Match
INSPIRE (Scotland) Regulations 2009 (S.S.I. 2009/440)Previous MatchNext Match
Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009 (S.R (N.I.) 2009 No. 225)Previous MatchNext Match
345.The Controlled Drugs (Supervision of Management and Use) Regulations (Northern...Previous MatchNext Match
346.In regulation 2(2) (interpretation), at the appropriate place insert— “the...Previous MatchNext Match
347.(1) Regulation 25 (duty to co-operate by disclosing information as...Previous MatchNext Match
348.(1) Regulation 26 (responsible bodies requesting additional information be disclosed...Previous MatchNext Match
349.(1) Regulation 29 (occurrence reports) is amended as follows. Previous MatchNext Match
Data Protection (Monetary Penalties) (Maximum Penalty and Notices) Regulations 2010 (S.I. 2010/31)Previous MatchNext Match
Pharmacy Order 2010 (S.I. 2010/231)Previous MatchNext Match
351.The Pharmacy Order 2010 is amended as follows. Previous MatchNext Match
352.In article 3(1) (interpretation), omit the definition of “Directive 95/46/EC”....Previous MatchNext Match
353.(1) Article 9 (inspection and enforcement) is amended as follows....Previous MatchNext Match
354.In article 33A (European professional card), after paragraph (2) insert—...Previous MatchNext Match
355.(1) Article 49 (disclosure of information: general) is amended as...Previous MatchNext Match
356.(1) Article 55 (professional performance assessments) is amended as follows....Previous MatchNext Match
357.In article 67(6) (Directive 2005/36/EC: designation of competent authority etc.),...Previous MatchNext Match
358.(1) Schedule 2A (Directive 2005/36/EC: European professional card) is amended...Previous MatchNext Match
359.(1) The table in Schedule 3 (Directive 2005/36/EC: designation of...Previous MatchNext Match
Data Protection (Monetary Penalties) Order 2010 (S.I. 2010/910)Previous MatchNext Match
National Employment Savings Trust Order 2010 (S.I. 2010/917)Previous MatchNext Match
Local Elections (Northern Ireland) Order 2010 (S.I. 2010/2977)Previous MatchNext Match
Pupil Information (Wales) Regulations 2011 (S.I. 2011/1942 (W.209))Previous MatchNext Match
Debt Arrangement Scheme (Scotland) Regulations 2011 (S.S.I. 2011/141)Previous MatchNext Match
Police and Crime Commissioner Elections Order 2012 (S.I. 2012/1917)Previous MatchNext Match
Data Protection (Processing of Sensitive Personal Data) Order 2012 (S.I. 2012/1978)Previous MatchNext Match
Neighbourhood Planning (Referendums) Regulations 2012 (S.I. 2012/2031)Previous MatchNext Match
371.Schedule 6 to the Neighbourhood Planning (Referendums) Regulations 2012 (registering...Previous MatchNext Match
372.(1) Paragraph 29(1) (interpretation of Part 8) is amended as...Previous MatchNext Match
373.In paragraph 32(3)(b)(i), for “section 11(3) of the Data Protection...Previous MatchNext Match
374.In paragraph 33(6) and (7) (supply of copy of business...Previous MatchNext Match
375.In paragraph 34(6) and (7) (supply of copy of business...Previous MatchNext Match
376.In paragraph 39(8) and (97) (supply of copy of business...Previous MatchNext Match
377.In paragraph 45(2) (conditions on the use, supply and disclosure...Previous MatchNext Match
Controlled Drugs (Supervision of Management and Use) Regulations 2013 (S.I. 2013/373)Previous MatchNext Match
Communications Act 2003 (Disclosure of Information) Order 2014 (S.I. 2014/1825)Previous MatchNext Match
Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141)Previous MatchNext Match
Data Protection (Assessment Notices) (Designation of National Health Service Bodies) Order 2014 (S.I. 2014/3282)Previous MatchNext Match
The Control of Explosives Precursors etc Regulations (Northern Ireland) 2014 (S.R. (N.I.) 2014 No. 224)Previous MatchNext Match
Control of Poisons and Explosives Precursors Regulations 2015 (S.I. 2015/966)Previous MatchNext Match
Companies (Disclosure of Date of Birth Information) Regulations 2015 (S.I. 2015/1694)Previous MatchNext Match
Small and Medium Sized Business (Credit Information) Regulations 2015 (S.I. 2015/1945)Previous MatchNext Match
European Union (Recognition of Professional Qualifications) Regulations 2015 (S.I. 2015/2059)Previous MatchNext Match
388.The European Union (Recognition of Professional Qualifications) Regulations 2015 are...Previous MatchNext Match
389.(1) Regulation 2(1) (interpretation) is amended as follows. Previous MatchNext Match
390.In regulation 5(5) (functions of competent authorities in the United...Previous MatchNext Match
391.In regulation 45(3) (processing and access to data regarding the...Previous MatchNext Match
392.In regulation 46(1) (processing and access to data regarding the...Previous MatchNext Match
393.In regulation 48(2) (processing and access to data regarding the...Previous MatchNext Match
394.In regulation 66(3) (exchange of information), for “Directives 95/46/EC” substitute...Previous MatchNext Match
Scottish Parliament (Elections etc) Order 2015 (S.S.I. 2015/425)Previous MatchNext Match
Recall of MPs Act 2015 (Recall Petition) Regulations 2016 (S.I. 2016/295)Previous MatchNext Match
Register of People with Significant Control Regulations 2016 (S.I. 2016/339)Previous MatchNext Match
399.Schedule 4 to the Register of People with Significant Control...Previous MatchNext Match
400.(1) Paragraph 6 (disclosure to a credit reference agency) is...Previous MatchNext Match
401.In paragraph 12A (disclosure to a credit institution or a...Previous MatchNext Match
402.In Part 3 (interpretation), after paragraph 13 insert— In this Schedule, “data protection obligations”, in relation to a...Previous MatchNext Match
Electronic Identification and Trust Services for Electronic Transactions Regulations 2016 (S.I. 2016/696)Previous MatchNext Match
403.The Electronic Identification and Trust Services for Electronic Transactions Regulations...Previous MatchNext Match
404.In regulation 2(1) (interpretation), omit the definition of “the 1998...Previous MatchNext Match
405.In regulation 3(3) (supervision), omit “under the 1998 Act”. Previous MatchNext Match
406.For Schedule 2 substitute— SCHEDULE 2 Information Commissioner's enforcement powers...Previous MatchNext Match
Court Files Privileged Access Rules (Northern Ireland) 2016 (S.R. (N.I.) 2016 No. 123)Previous MatchNext Match
Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (S.I. 2017/692)Previous MatchNext Match
410.The Money Laundering, Terrorist Financing and Transfer of Funds (Information...Previous MatchNext Match
411.In regulation 3(1) (interpretation), at the appropriate places insert— “the...Previous MatchNext Match
412.In regulation 16(8) (risk assessment by the Treasury and Home...Previous MatchNext Match
413.In regulation 17(9) (risk assessment by supervisory authorities), for “the...Previous MatchNext Match
414.For regulation 40(9)(c) (record keeping) substitute— (c) “data subject” has...Previous MatchNext Match
415.(1) Regulation 41 (data protection) is amended as follows. Previous MatchNext Match
416.(1) Regulation 84 (publication: the Financial Conduct Authority) is amended...Previous MatchNext Match
417.(1) Regulation 85 (publication: the Commissioners) is amended as follows....Previous MatchNext Match
418.For regulation 106(a) (general restrictions) substitute— (a) a disclosure in...Previous MatchNext Match
419.After paragraph 27 of Schedule 3 (relevant offences) insert— An offence under the Data Protection Act 2018, apart from...Previous MatchNext Match
Scottish Partnerships (Register of People with Significant Control) Regulations 2017 (S.I. 2017/694)Previous MatchNext Match
Data Protection (Charges and Information) Regulations 2018 (S.I. 2018/480)Previous MatchNext Match
National Health Service (General Medical Services Contracts) (Scotland) Regulations 2018 (S.S.I. 2018/66)Previous MatchNext Match
422.The National Health Service (General Medical Services Contracts) (Scotland) Regulations...Previous MatchNext Match
423.(1) Regulation 1 (citation and commencement) is amended as follows....Previous MatchNext Match
424.In regulation 3(1) (interpretation)— (a) omit the definition of “the...Previous MatchNext Match
425.(1) Schedule 6 (other contractual terms) is amended as follows....Previous MatchNext Match
National Health Service (Primary Medical Services Section 17C Agreements) (Scotland) Regulations 2018 (S.S.I. 2018/67)Previous MatchNext Match
426.The National Health Service (Primary Medical Services Section 17C Agreements)...Previous MatchNext Match
427.(1) Regulation 1 (citation and commencement) is amended as follows....Previous MatchNext Match
428.In regulation 3(1) (interpretation)— (a) omit the definition of “the...Previous MatchNext Match
429.(1) Schedule 1 (content of agreements) is amended as follows....Previous MatchNext Match
SCHEDULE 20Previous MatchNext Match
Transitional provision etcPrevious MatchNext Match
PART 2 Rights of data subjectsPrevious MatchNext Match
Right of access to personal data under the 1998 ActPrevious MatchNext Match
Right to prevent processing likely to cause damage or distress under the 1998 ActPrevious MatchNext Match
Right to prevent processing for purposes of direct marketing under the 1998 ActPrevious MatchNext Match
Automated processing under the 1998 ActPrevious MatchNext Match
Compensation for contravention of the 1998 Act or Part 4 of the 2014 RegulationsPrevious MatchNext Match
Rectification, blocking, erasure and destruction under the 1998 ActPrevious MatchNext Match
Jurisdiction and procedure under the 1998 ActPrevious MatchNext Match
Prohibition by this Act of requirement to produce relevant recordsPrevious MatchNext Match
Avoidance under this Act of certain contractual terms relating to health recordsPrevious MatchNext Match
PART 3 The UK GDPR and Part 2 of this ActPrevious MatchNext Match
PART 4 Law enforcement and intelligence services processingPrevious MatchNext Match
PART 5 National security certificatesPrevious MatchNext Match
PART 6 The Information CommissionerPrevious MatchNext Match
Fees etc received by the CommissionerPrevious MatchNext Match
Functions in connection with the Data Protection ConventionPrevious MatchNext Match
Co-operation with the European Commission: transfers of personal data outside the EEAPrevious MatchNext Match
Charges payable to the Commissioner by controllersPrevious MatchNext Match
PART 7 Enforcement etc under the 1998 ActPrevious MatchNext Match
PART 8 Enforcement etc under this ActPrevious MatchNext Match
PART 9 Other enactmentsPrevious MatchNext Match
Powers to disclose information to the CommissionerPrevious MatchNext Match
Codes etc required to be consistent with the Commissioner's data-sharing codePrevious MatchNext Match
Freedom of Information Act 2000Previous MatchNext Match
51.Paragraphs 52 to 55 make provision about the Freedom of...Previous MatchNext Match
52.(1) This paragraph applies where a request for information was...Previous MatchNext Match
53.(1) Tribunal Procedure Rules made under paragraph 7(1)(b) of Schedule...Previous MatchNext Match
54.(1) The repeal of paragraph 8 of Schedule 6 to...Previous MatchNext Match
55.(1) The amendment of section 77 of the 2000 Act...Previous MatchNext Match
Freedom of Information (Scotland) Act 2002Previous MatchNext Match
Access to Health Records (Northern Ireland) Order 1993 (S.I. 1993/1250 (N.I. 4))Previous MatchNext Match
Privacy and Electronic Communications (EC Directive) Regulations 2003 (S.I. 2003/2450)Previous MatchNext Match
Health and Personal Social Services (Quality, Improvement and Regulation) (Northern Ireland) Order 2003 (S.I. 2003/431 (N.I. 9))Previous MatchNext Match
Environmental Information Regulations 2004 (S.I. 2004/3391)Previous MatchNext Match
Environmental Information (Scotland) Regulations 2004 (S.S.I. 2004/520)Previous MatchNext Match
SCHEDULE 21Previous MatchNext Match
Further transitional provision etcPrevious MatchNext Match
Part 2 Continuation of existing acts etcPrevious MatchNext Match
Part 3 Transfers to third countries and international organisationsPrevious MatchNext Match
4.UK GDPR: adequacy decisions and adequacy regulationsPrevious MatchNext Match
5.(1) The following are specified for the purposes of paragraph...Previous MatchNext Match
6.(1) In the provisions listed in sub-paragraph (2)— Previous MatchNext Match
7.UK GDPR: transfers subject to appropriate safeguards provided by standard data protection clausesPrevious MatchNext Match
8.(1) Paragraph 7 does not apply to the extent that...Previous MatchNext Match
9.UK GDPR: transfers subject to appropriate safeguards provided by binding corporate rulesPrevious MatchNext Match
10.Part 3 (law enforcement processing): adequacy decisions and adequacy regulationsPrevious MatchNext Match
11.(1) The following are specified for the purposes of paragraph...Previous MatchNext Match
12.In section 74B(1), (3), (6) and (7)— Previous MatchNext Match
Part 4 Repeal of provisions in Chapter 3 of Part 2Previous MatchNext Match
The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Whole Act you have selected contains over 200 provisions and might take some time to download.
Would you like to continue?
The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Whole Act without Schedules you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Schedules you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.
Original (As Enacted or Made): The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.
Text created by the government department responsible for the subject matter of the Act to explain what the Act sets out to achieve and to make the Act accessible to readers who are not legally qualified. Explanatory Notes were introduced in 1999 and accompany all Public Acts except Appropriation, Consolidated Fund, Finance and Consolidation Acts.
Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:
This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.
Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:
Click 'View More' or select 'More Resources' tab for additional information including: