- Y Diweddaraf sydd Ar Gael (Diwygiedig)
- Pwynt Penodol mewn Amser (06/06/2022)
- Gwreiddiol (Fel y'i Deddfwyd)
Point in time view as at 06/06/2022.
Data Protection Act 2018, Cross Heading: Codes of practice is up to date with all changes known to be in force on or before 04 September 2024. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
(1)The Commissioner must prepare a code of practice which contains—
(a)practical guidance in relation to the sharing of personal data in accordance with the requirements of the data protection legislation, and
(b)such other guidance as the Commissioner considers appropriate to promote good practice in the sharing of personal data.
(2)Where a code under this section is in force, the Commissioner may prepare amendments of the code or a replacement code.
(3)Before preparing a code or amendments under this section, the Commissioner must consult the Secretary of State and such of the following as the Commissioner considers appropriate—
(a)trade associations;
(b)data subjects;
(c)persons who appear to the Commissioner to represent the interests of data subjects.
(4)A code under this section may include transitional provision or savings.
(5)In this section—
“good practice in the sharing of personal data” means such practice in the sharing of personal data as appears to the Commissioner to be desirable having regard to the interests of data subjects and others, including compliance with the requirements of the data protection legislation;
“the sharing of personal data” means the disclosure of personal data by transmission, dissemination or otherwise making it available;
“trade association” includes a body representing controllers or processors.
(1)The Commissioner must prepare a code of practice which contains—
(a)practical guidance in relation to the carrying out of direct marketing in accordance with the requirements of the data protection legislation and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (S.I. 2003/2426), and
(b)such other guidance as the Commissioner considers appropriate to promote good practice in direct marketing.
(2)Where a code under this section is in force, the Commissioner may prepare amendments of the code or a replacement code.
(3)Before preparing a code or amendments under this section, the Commissioner must consult the Secretary of State and such of the following as the Commissioner considers appropriate—
(a)trade associations;
(b)data subjects;
(c)persons who appear to the Commissioner to represent the interests of data subjects.
(4)A code under this section may include transitional provision or savings.
(5)In this section—
“direct marketing” means the communication (by whatever means) of advertising or marketing material which is directed to particular individuals;
“good practice in direct marketing” means such practice in direct marketing as appears to the Commissioner to be desirable having regard to the interests of data subjects and others, including compliance with the requirements mentioned in subsection (1)(a);
“trade association” includes a body representing controllers or processors.
(1)The Commissioner must prepare a code of practice which contains such guidance as the Commissioner considers appropriate on standards of age-appropriate design of relevant information society services which are likely to be accessed by children.
(2)Where a code under this section is in force, the Commissioner may prepare amendments of the code or a replacement code.
(3)Before preparing a code or amendments under this section, the Commissioner must consult the Secretary of State and such other persons as the Commissioner considers appropriate, including—
(a)children,
(b)parents,
(c)persons who appear to the Commissioner to represent the interests of children,
(d)child development experts, and
(e)trade associations.
(4)In preparing a code or amendments under this section, the Commissioner must have regard—
(a)to the fact that children have different needs at different ages, and
(b)to the United Kingdom's obligations under the United Nations Convention on the Rights of the Child.
(5)A code under this section may include transitional provision or savings.
(6)Any transitional provision included in the first code under this section must cease to have effect before the end of the period of 12 months beginning when the code comes into force.
(7)In this section—
“age-appropriate design” means the design of services so that they are appropriate for use by, and meet the development needs of, children;
“information society services” has the same meaning as in the [F1UK GDPR], but does not include preventive or counselling services;
“relevant information society services” means information society services which involve the processing of personal data to which the [F1UK GDPR] applies;
“standards of age-appropriate design of relevant information society services” means such standards of age-appropriate design of such services as appear to the Commissioner to be desirable having regard to the best interests of children;
“trade association” includes a body representing controllers or processors;
“the United Nations Convention on the Rights of the Child” means the Convention on the Rights of the Child adopted by the General Assembly of the United Nations on 20 November 1989 (including any Protocols to that Convention which are in force in relation to the United Kingdom), subject to any reservations, objections or interpretative declarations by the United Kingdom for the time being in force.
Textual Amendments
F1Words in s. 123(7) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 53 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Commencement Information
I1S. 123 in force at 23.7.2018 by S.I. 2018/625, reg. 3(a)
(1)The Commissioner must prepare a code of practice which contains—
(a)practical guidance in relation to the processing of personal data for the purposes of journalism in accordance with the requirements of the data protection legislation, and
(b)such other guidance as the Commissioner considers appropriate to promote good practice in the processing of personal data for the purposes of journalism.
(2)Where a code under this section is in force, the Commissioner may prepare amendments of the code or a replacement code.
(3)Before preparing a code or amendments under this section, the Commissioner must consult such of the following as the Commissioner considers appropriate—
(a)trade associations;
(b)data subjects;
(c)persons who appear to the Commissioner to represent the interests of data subjects.
(4)A code under this section may include transitional provision or savings.
(5)In this section—
“good practice in the processing of personal data for the purposes of journalism” means such practice in the processing of personal data for those purposes as appears to the Commissioner to be desirable having regard to—
the interests of data subjects and others, including compliance with the requirements of the data protection legislation, and
the special importance of the public interest in the freedom of expression and information;
“trade association” includes a body representing controllers or processors.
(1)When a code is prepared under section 121, 122, 123 or 124—
(a)the Commissioner must submit the final version to the Secretary of State, and
(b)the Secretary of State must lay the code before Parliament.
(2)In relation to the first code under section 123—
(a)the Commissioner must prepare the code as soon as reasonably practicable and must submit it to the Secretary of State before the end of the period of 18 months beginning when this Act is passed, and
(b)the Secretary of State must lay it before Parliament as soon as reasonably practicable.
(3)If, within the 40-day period, either House of Parliament resolves not to approve a code prepared under section 121, 122, 123 or 124, the Commissioner must not issue the code.
(4)If no such resolution is made within that period—
(a)the Commissioner must issue the code, and
(b)the code comes into force at the end of the period of 21 days beginning with the day on which it is issued.
(5)If, as a result of subsection (3), there is no code in force under section 121, 122, 123 or 124, the Commissioner must prepare another version of the code.
(6)Nothing in subsection (3) prevents another version of the code being laid before Parliament.
(7)In this section, “the 40-day period” means—
(a)if the code is laid before both Houses of Parliament on the same day, the period of 40 days beginning with that day, or
(b)if the code is laid before the Houses of Parliament on different days, the period of 40 days beginning with the later of those days.
(8)In calculating the 40-day period, no account is to be taken of any period during which Parliament is dissolved or prorogued or during which both Houses of Parliament are adjourned for more than 4 days.
(9)This section, other than subsections (2) and (5), applies in relation to amendments prepared under section 121, 122, 123 or 124 as it applies in relation to codes prepared under those sections.
Commencement Information
I2S. 125 not in force at Royal Assent; s. 125 in force at 23.7.2018 for specified purposes, see s. 212(3)(b)
I3S. 125 in force at 23.7.2018 for specified purposes by S.I. 2018/625, reg. 3(b)
(1)The Commissioner must publish a code issued under section 125(4).
(2)Where an amendment of a code is issued under section 125(4), the Commissioner must publish—
(a)the amendment, or
(b)the code as amended by it.
(3)The Commissioner must keep under review each code issued under section 125(4) for the time being in force.
(4)Where the Commissioner becomes aware that the terms of such a code could result in a breach of an international obligation of the United Kingdom, the Commissioner must exercise the power under section 121(2), 122(2), 123(2) or 124(2) with a view to remedying the situation.
Commencement Information
I4S. 126 not in force at Royal Assent; s. 126 in force at 23.7.2018 for specified purposes, see s. 212(3)(b)
I5S. 126 in force at 23.7.2018 for specified purposes by S.I. 2018/625, reg. 3(c)
(1)A failure by a person to act in accordance with a provision of a code issued under section 125(4) does not of itself make that person liable to legal proceedings in a court or tribunal.
(2)A code issued under section 125(4), including an amendment or replacement code, is admissible in evidence in legal proceedings.
(3)In any proceedings before a court or tribunal, the court or tribunal must take into account a provision of a code issued under section 125(4) in determining a question arising in the proceedings if—
(a)the question relates to a time when the provision was in force, and
(b)the provision appears to the court or tribunal to be relevant to the question.
(4)Where the Commissioner is carrying out a function described in subsection (5), the Commissioner must take into account a provision of a code issued under section 125(4) in determining a question arising in connection with the carrying out of the function if—
(a)the question relates to a time when the provision was in force, and
(b)the provision appears to the Commissioner to be relevant to the question.
(5)Those functions are functions under—
(a)the data protection legislation, or
(b)the Privacy and Electronic Communications (EC Directive) Regulations 2003 (S.I. 2003/2426).
Commencement Information
I6S. 127 not in force at Royal Assent; s. 127 in force at 23.7.2018 for specified purposes, see s. 212(3)(b)
I7S. 127 in force at 23.7.2018 for specified purposes by S.I. 2018/625, reg. 3(d)
(1)The Secretary of State may by regulations require the Commissioner—
(a)to prepare appropriate codes of practice giving guidance as to good practice in the processing of personal data, and
(b)to make them available to such persons as the Commissioner considers appropriate.
(2)Before preparing such codes, the Commissioner must consult such of the following as the Commissioner considers appropriate—
(a)trade associations;
(b)data subjects;
(c)persons who appear to the Commissioner to represent the interests of data subjects.
(3)Regulations under this section—
(a)must describe the personal data or processing to which the code of practice is to relate, and
(b)may describe the persons or classes of person to whom it is to relate.
(4)Regulations under this section are subject to the negative resolution procedure.
(5)In this section—
“good practice in the processing of personal data” means such practice in the processing of personal data as appears to the Commissioner to be desirable having regard to the interests of data subjects and others, including compliance with the requirements of the data protection legislation;
“trade association” includes a body representing controllers or processors.
Commencement Information
I8S. 128 in force at Royal Assent for specified purposes, see s. 212(2)(f)
The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Whole Act you have selected contains over 200 provisions and might take some time to download.
Would you like to continue?
The Whole Act without Schedules you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Whole Act without Schedules you have selected contains over 200 provisions and might take some time to download.
Would you like to continue?
Y Ddeddf Gyfan you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
Y Ddeddf Gyfan heb Atodlenni you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
Y Rhestrau you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
Y Diweddaraf sydd Ar Gael (diwygiedig):Y fersiwn ddiweddaraf sydd ar gael o’r ddeddfwriaeth yn cynnwys newidiadau a wnaed gan ddeddfwriaeth ddilynol ac wedi eu gweithredu gan ein tîm golygyddol. Gellir gweld y newidiadau nad ydym wedi eu gweithredu i’r testun eto yn yr ardal ‘Newidiadau i Ddeddfwriaeth’.
Gwreiddiol (Fel y’i Deddfwyd neu y’i Gwnaed): Mae'r wreiddiol fersiwn y ddeddfwriaeth fel ag yr oedd pan gafodd ei deddfu neu eu gwneud. Ni wnaed unrhyw newidiadau i’r testun.
Pwynt Penodol mewn Amser: This becomes available after navigating to view revised legislation as it stood at a certain point in time via Advanced Features > Show Timeline of Changes or via a point in time advanced search.
Rhychwant ddaearyddol: Indicates the geographical area that this provision applies to. For further information see ‘Frequently Asked Questions’.
Dangos Llinell Amser Newidiadau: See how this legislation has or could change over time. Turning this feature on will show extra navigation options to go to these specific points in time. Return to the latest available version by using the controls above in the What Version box.
Testun a grëwyd gan yr adran o’r llywodraeth oedd yn gyfrifol am destun y Ddeddf i esbonio beth mae’r Ddeddf yn ceisio ei wneud ac i wneud y Ddeddf yn hygyrch i ddarllenwyr nad oes ganddynt gymhwyster cyfreithiol. Cyflwynwyd Nodiadau Esboniadol ym 1999 ac maent yn cyd-fynd â phob Deddf Gyhoeddus ac eithrio Deddfau Adfeddiannu, Cronfa Gyfunol, Cyllid a Chyfnerthiad.
Gallwch wneud defnydd o ddogfennau atodol hanfodol a gwybodaeth ar gyfer yr eitem ddeddfwriaeth o’r tab hwn. Yn ddibynnol ar yr eitem ddeddfwriaeth sydd i’w gweld, gallai hyn gynnwys:
This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.
Defnyddiwch y ddewislen hon i agor dogfennau hanfodol sy’n cyd-fynd â’r ddeddfwriaeth a gwybodaeth am yr eitem hon o ddeddfwriaeth. Gan ddibynnu ar yr eitem o ddeddfwriaeth sy’n cael ei gweld gall hyn gynnwys:
liciwch ‘Gweld Mwy’ neu ddewis ‘Rhagor o Adnoddau’ am wybodaeth ychwanegol gan gynnwys