(This note is not part of the Regulations)
These Regulations bring into force specified provisions of the Data Protection Act 2018 (c.12) (“the 2018 Act”) and make transitional and saving provision in connection with the coming into force of those provisions for the purposes of enforcing the Electronic Identification and Trust Services for Electronic Transactions Regulations 2016 (“the EITSET Regulations”) and Regulation (EU) No 910/2014 of the European Parliament and of the Council in electronic identification and trust services for electronic transactions in the internal market (as amended from time to time) (“the eIDAS Regulation”). Certain provisions were brought into force on Royal Assent by virtue of section 212(2) of the 2018 Act.
Regulation 2(1) lists the provisions that will come into force on 25th May 2018, subject to certain exceptions, which are listed in section 212(3) of the 2018 Act, and regulation 2(2) and (3) and regulation 3 of these Regulations. Section 212(3) of the 2018 Act brings certain provisions into force two months after Royal Assent. The provisions listed in regulation 2(2) and (3), will be brought into force at a later date.
Regulation 3 lists the provisions that will come into force on 23rd July 2018.
Regulation 4 makes transitional and saving provision about the enforcement regime for the EITSET Regulations and the eIDAS Regulation.