PART 7 U.K. Supplementary and final provision

Modifications etc. (not altering text)

C1 Pt. 7 applied in part (with modifications) by S.I. 2016/696, Sch. 2 (as substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 406 (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g) (with reg. 4))

C2 Pts. 5-7 applied in part (with modifications) (5.2.2026) by S.I. 2003/2426, reg. 31, Sch. 1 (as substituted by Data (Use and Access) Act 2025 (c. 18), ss. 115(5)(8), 142(1), Sch. 13; S.I. 2026/82, reg. 2(y)(z14) (with regs. 8-11))

Rights of the data subject U.K.

186 [F1 Protection of data subject’s rights] U.K.

(1) An enactment or rule of law prohibiting or restricting the disclosure of information, or authorising the withholding of information, does not remove or restrict the obligations and rights provided for in the provisions listed in subsection (2) F2 ....

(2) The provisions providing obligations and rights are—

(a) Chapter III of the [F3 UK GDPR] (rights of the data subject),

(b) Chapter 3 of Part 3 of this Act (law enforcement processing: rights of the data subject), and

(c) Chapter 3 of Part 4 of this Act (intelligence services processing: rights of the data subject).

[F4 (2A) Subsection (1) does not apply—

(a) to an enactment contained in, or made under, a provision listed in subsection (2),

(b) to an enactment contained in, or made under, a provision listed in subsection (3),

(c) to the extent that an enactment makes express provision to the contrary referring to this section or to a provision listed in subsection (2), or

(d) to the extent that subsection (1) is disapplied by section 186A(3).]

(3) The [F5 provisions referred to in subsection (2A)(b)] are—

(a) in Chapter 2 of Part 2 of this Act, sections 15 and 16 and Schedules 2, 3 and 4,

(b) in Chapter 3 of Part 2 of this Act, sections F6 ... 24, 25 and 26,

F7 (c) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

[F8 (ca) in Part 3 of this Act, section 78A, and]

(d) in Part 4 of this Act, Chapter 6 .

Textual Amendments

F1 S. 186 heading substituted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 106(4)(a), 142(1); S.I. 2025/904, reg. 2(k)

F2 Words in s. 186(1) omitted (20.8.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 106(4)(b), 142(1); S.I. 2025/904, reg. 2(k)

F3 Words in s. 186(2)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 80(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F4 S. 186(2A) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 106(4)(c), 142(1); S.I. 2025/904, reg. 2(k)

F5 Words in s. 186(3) substituted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 106(4)(d)(i), 142(1); S.I. 2025/904, reg. 2(k)

F6 Word in s. 186(3)(b) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 80(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F7 S. 186(3)(c) omitted (20.8.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 106(4)(d)(ii), 142(1); S.I. 2025/904, reg. 2(k)

F8 S. 186(3)(ca) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(10), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Commencement Information

I1 S. 186 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)