1Overview
(1)This Act makes provision about the processing of personal data.
(2)Most processing of personal data is subject to the GDPR.
(3)Part 2 supplements the GDPR (see Chapter 2) and applies a broadly equivalent regime to certain types of processing to which the GDPR does not apply (see Chapter 3).
(4)Part 3 makes provision about the processing of personal data by competent authorities for law enforcement purposes and implements the Law Enforcement Directive.
(5)Part 4 makes provision about the processing of personal data by the intelligence services.
(6)Part 5 makes provision about the Information Commissioner.
(7)Part 6 makes provision about the enforcement of the data protection legislation.
(8)Part 7 makes supplementary provision, including provision about the application of this Act to the Crown and to Parliament.