http://www.legislation.gov.uk/ukpga/2018/12/section/198Data Protection Act 2018An Act to make provision for the regulation of the processing of information relating to individuals; to make provision in connection with the Information Commissioner's functions under certain regulations relating to information; to make provision for a direct marketing code of practice; and for connected purposes.texttext/xmlenStatute Law Database2026-05-12Expert Participation2026-05-12 Data Protection Act 2018s. 26(2)(f)(ai)Data (Use and Access) Act 2025Sch. 10 para. 9s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 44(1)(da)Data (Use and Access) Act 2025Sch. 10 para. 10(2)(a)s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 44(5)(ca)Data (Use and Access) Act 2025Sch. 10 para. 10(3)(a)s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 45(2)(ea)Data (Use and Access) Act 2025Sch. 10 para. 11(2)(a)s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 45(5)(ca)Data (Use and Access) Act 2025Sch. 10 para. 11(3)(a)s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 45A(2)(ca)Data (Use and Access) Act 2025Sch. 10 para. 12s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 48(1)(b)(iia)Data (Use and Access) Act 2025Sch. 10 para. 13(2)(a)s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 48(4)(ba)Data (Use and Access) Act 2025Sch. 10 para. 13(3)(a)s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 149(5A)Data (Use and Access) Act 2025Sch. 10 para. 16(3)s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 157(4A)Data (Use and Access) Act 2025Sch. 10 para. 18s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 187(2)(za)Data (Use and Access) Act 2025Sch. 10 para. 21(3)(a)s. 142(1)reg. 3(b)reg. 7Data Protection Act 2018s. 26(2)(f)(ai)The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026Sch. 2 para. 23(2)(3)reg. 1(4)reg. 1(2)Data Protection Act 2018s. 160(4)(ab)The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026Sch. 2 para. 23(2)(3)reg. 1(2)Data Protection Act 2018Sch. 7 para. 51AThe Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026Sch. 2 para. 23(12)(a)reg. 1(2)Data Protection Act 2018Sch. 3 para. 8(1)(y)Adoption and Children Act (Northern Ireland) 2022Sch. 3 para. 78(3)s. 160(1) PART 71981Subsection (2) applies where—aan offence under this Act has been committed by a body corporate, andbit is proved to have been committed with the consent or connivance of or to be attributable to neglect on the part of—ia director, manager, secretary or similar officer of the body corporate, oriia person who was purporting to act in such a capacity.2The director, manager, secretary, officer or person, as well as the body corporate, is guilty of the offence and liable to be proceeded against and punished accordingly.3Where the affairs of a body corporate are managed by its members, subsections (1) and (2) apply in relation to the acts and omissions of a member in connection with the member's management functions in relation to the body as if the member were a director of the body corporate.4Subsection (5) applies where—aan offence under this Act has been committed by a Scottish partnership, andbthe contravention in question is proved to have occurred with the consent or connivance of, or to be attributable to any neglect on the part of, a partner.5The partner, as well as the partnership, is guilty of the offence and liable to be proceeded against and punished accordingly.Pts. 5-7 applied in part (with modifications) (5.2.2026) by S.I. 2003/2426, reg. 31, Sch. 1 (as substituted by Data (Use and Access) Act 2025 (c. 18), ss. 115(5)(8), 142(1), Sch. 13; S.I. 2026/82, reg. 2(y)(z14) (with regs. 8-11))Pt. 7 applied in part (with modifications) by S.I. 2016/696, Sch. 2 (as substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 406 (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g) (with reg. 4))S. 198 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)