- Latest available (Revised)
- Point in Time (03/12/2014)
- Original (As enacted)
Point in time view as at 03/12/2014.
Data Protection Act 1998, Cross Heading: Functions of Commissioner is up to date with all changes known to be in force on or before 23 August 2024. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
(1)It shall be the duty of the Commissioner to promote the following of good practice by data controllers and, in particular, so to perform his functions under this Act as to promote the observance of the requirements of this Act by data controllers.
(2)The Commissioner shall arrange for the dissemination in such form and manner as he considers appropriate of such information as it may appear to him expedient to give to the public about the operation of this Act, about good practice, and about other matters within the scope of his functions under this Act, and may give advice to any person as to any of those matters.
(3)Where—
(a)the [F1 Secretary of State] so directs by order, or
(b)the Commissioner considers it appropriate to do so,
the Commissioner shall, after such consultation with trade associations, data subjects or persons representing data subjects as appears to him to be appropriate, prepare and disseminate to such persons as he considers appropriate codes of practice for guidance as to good practice.
(4)The Commissioner shall also—
(a)where he considers it appropriate to do so, encourage trade associations to prepare, and to disseminate to their members, such codes of practice, and
(b)where any trade association submits a code of practice to him for his consideration, consider the code and, after such consultation with data subjects or persons representing data subjects as appears to him to be appropriate, notify the trade association whether in his opinion the code promotes the following of good practice.
(5)An order under subsection (3) shall describe the personal data or processing to which the code of practice is to relate, and may also describe the persons or classes of persons to whom it is to relate.
[F2(5A)In determining the action required to discharge the duties imposed by subsections (1) to (4), the Commissioner may take account of any action taken to discharge the duty imposed by section 52A (data-sharing code).]
(6)The Commissioner shall arrange for the dissemination in such form and manner as he considers appropriate of—
(a)any Community finding as defined by paragraph 15(2) of Part II of Schedule 1,
(b)any decision of the European Commission, under the procedure provided for in Article 31(2) of the Data Protection Directive, which is made for the purposes of Article 26(3) or (4) of the Directive, and
(c)such other information as it may appear to him to be expedient to give to data controllers in relation to any personal data about the protection of the rights and freedoms of data subjects in relation to the processing of personal data in countries and territories outside the European Economic Area.
(7)The Commissioner may, with the consent of the data controller, assess any processing of personal data for the following of good practice and shall inform the data controller of the results of the assessment.
(8)The Commissioner may charge such sums as he may F3... determine for any [F4 relevant ] services provided by the Commissioner by virtue of this Part.
[F5(8A) In subsection (8) “ relevant services ” means—
(a)the provision to the same person of more than one copy of any published material where each of the copies of the material is either provided on paper, a portable disk which stores the material electronically or a similar medium,
(b)the provision of training, or
(c)the provision of conferences.
(8B)The Secretary of State may by order amend subsection (8A).]
(9)In this section—
“good practice” means such practice in the processing of personal data as appears to the Commissioner to be desirable having regard to the interests of data subjects and others, and includes (but is not limited to) compliance with the requirements of this Act;
“trade association” includes any body representing data controllers.
Textual Amendments
F1Words in s. 51 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)
F2S. 51(5A) inserted (1.2.2010) by Coroners and Justice Act 2009 (c. 25), ss. 174(2), 175, 182 (with s. 180); S.I. 2010/145, art. 2, Sch. para. 16
F3Words in s. 51(8) repealed (1.9.2013) by Protection of Freedoms Act 2012 (c. 9), ss. 107(1)(a)(i), 120, Sch. 10 Pt. 8 (with s. 97); S.I. 2013/1906, art. 3(d)
F4Word in s. 51(8) inserted (1.9.2013) by Protection of Freedoms Act 2012 (c. 9), ss. 107(1)(a)(ii), 120 (with s. 97); S.I. 2013/1906, art. 3(d)
F5S. 51(8A)(8B) inserted (1.9.2013) by Protection of Freedoms Act 2012 (c. 9), ss. 107(1)(b), 120 (with s. 97); S.I. 2013/1906, art. 3(d)
Commencement Information
I1S. 51 wholly in force at 1.3.2000; s. 51 in force for certain purposes at Royal Assent see s. 75(2)(i); s. 51 in force at 1.3.2000 insofar as not already in force by S.I. 2000/183, art. 2(1)
(1)The Commissioner shall lay annually before each House of Parliament a general report on the exercise of his functions under this Act.
(2)The Commissioner may from time to time lay before each House of Parliament such other reports with respect to those functions as he thinks fit.
(3)The Commissioner shall lay before each House of Parliament any code of practice prepared under section 51(3) for complying with a direction of the [F6 Secretary of State] , unless the code is included in any report laid under subsection (1) or (2).
Textual Amendments
F6Words in s. 52 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)
(1)The Commissioner must prepare a code of practice which contains—
(a)practical guidance in relation to the sharing of personal data in accordance with the requirements of this Act, and
(b)such other guidance as the Commissioner considers appropriate to promote good practice in the sharing of personal data.
(2)For this purpose “good practice” means such practice in the sharing of personal data as appears to the Commissioner to be desirable having regard to the interests of data subjects and others, and includes (but is not limited to) compliance with the requirements of this Act.
(3)Before a code is prepared under this section, the Commissioner must consult such of the following as the Commissioner considers appropriate—
(a)trade associations (within the meaning of section 51);
(b)data subjects;
(c)persons who appear to the Commissioner to represent the interests of data subjects.
(4)In this section a reference to the sharing of personal data is to the disclosure of the data by transmission, dissemination or otherwise making it available.
Textual Amendments
F7Ss. 52A-52E inserted (1.2.2010) by Coroners and Justice Act 2009 (c. 25), ss. 174(1), 175, 182 (with s. 180); S.I. 2010/145, art. 2, Sch. para. 16
[F8(1)When a code is prepared under section 52A, the Commissioner must—
(a)consult the Secretary of State, and
(b)submit the final version of the code to the Secretary of State
(2)The Secretary of State must lay the code before Parliament, and]
(4)If, within the 40-day period, either House of Parliament resolves not to approve the code, the code is not to be issued by the Commissioner.
(5)If no such resolution is made within that period, the Commissioner must issue the code.
(6)[F9Where such a resolution is passed, the Commissioner ] must prepare another code of practice under section 52A.
(7)Subsection (4) does not prevent a new code being laid before Parliament.
(8)A code comes into force at the end of the period of 21 days beginning with the day on which it is issued.
(9)A code may include transitional provision or savings.
(10) In this section “ the 40-day period ” means the period of 40 days beginning with the day on which the code is laid before Parliament (or, if it is not laid before each House of Parliament on the same day, the later of the 2 days on which it is laid).
(11)In calculating the 40-day period, no account is to be taken of any period during which Parliament is dissolved or prorogued or during which both Houses are adjourned for more than 4 days.
Textual Amendments
F7Ss. 52A-52E inserted (1.2.2010) by Coroners and Justice Act 2009 (c. 25), ss. 174(1), 175, 182 (with s. 180); S.I. 2010/145, art. 2, Sch. para. 16
F8S. 52B(1)(2) substituted for s. 52B(1)-(3) (1.9.2013) by Protection of Freedoms Act 2012 (c. 9), ss. 106(2)(a), 120 (with s. 97); S.I. 2013/1906, art. 3(c)
F9Words in s. 52B(6) substituted (1.9.2013) by Protection of Freedoms Act 2012 (c. 9), ss. 106(2)(b), 120 (with s. 97); S.I. 2013/1906, art. 3(c)
(1)The Commissioner—
(a)must keep the data-sharing code under review, and
(b)may prepare an alteration to that code or a replacement code.
(2)Where, by virtue of a review under subsection (1)(a) or otherwise, the Commissioner becomes aware that the terms of the code could result in the United Kingdom being in breach of any of its [F10 EU] obligations or any other international obligation, the Commissioner must exercise the power under subsection (1)(b) with a view to remedying the situation.
(3)Before an alteration or replacement code is prepared under subsection (1), the Commissioner must consult such of the following as the Commissioner considers appropriate—
(a)trade associations (within the meaning of section 51);
(b)data subjects;
(c)persons who appear to the Commissioner to represent the interests of data subjects.
(4)Section 52B (other than subsection (6)) applies to an alteration or replacement code prepared under this section as it applies to the code as first prepared under section 52A.
(5)In this section “the data-sharing code” means the code issued under section 52B(5) (as altered or replaced from time to time).
Textual Amendments
F7Ss. 52A-52E inserted (1.2.2010) by Coroners and Justice Act 2009 (c. 25), ss. 174(1), 175, 182 (with s. 180); S.I. 2010/145, art. 2, Sch. para. 16
F10Word in s. 52C(2) substituted (22.4.2011) by virtue of The Treaty of Lisbon (Changes in Terminology) Order 2011 (S.I. 2011/1043), art. 6(1) (with application as mentioned in art. 3(3))
(1)The Commissioner must publish the code (and any replacement code) issued under section 52B(5).
(2)Where an alteration is so issued, the Commissioner must publish either—
(a)the alteration, or
(b)the code or replacement code as altered by it.
Textual Amendments
F7Ss. 52A-52E inserted (1.2.2010) by Coroners and Justice Act 2009 (c. 25), ss. 174(1), 175, 182 (with s. 180); S.I. 2010/145, art. 2, Sch. para. 16
(1)A failure on the part of any person to act in accordance with any provision of the data-sharing code does not of itself render that person liable to any legal proceedings in any court or tribunal.
(2)The data-sharing code is admissible in evidence in any legal proceedings.
(3)If any provision of the data-sharing code appears to—
(a)the Tribunal or a court conducting any proceedings under this Act,
(b)a court or tribunal conducting any other legal proceedings, or
(c)the Commissioner carrying out any function under this Act,
to be relevant to any question arising in the proceedings, or in connection with the exercise of that jurisdiction or the carrying out of those functions, in relation to any time when it was in force, that provision of the code must be taken into account in determining that question.
(4)In this section “the data-sharing code” means the code issued under section 52B(5) (as altered or replaced from time to time).]
Textual Amendments
F7Ss. 52A-52E inserted (1.2.2010) by Coroners and Justice Act 2009 (c. 25), ss. 174(1), 175, 182 (with s. 180); S.I. 2010/145, art. 2, Sch. para. 16
(1)An individual who is an actual or prospective party to any proceedings under section 7(9), 10(4), 12(8) or 14 or by virtue of section 13 which relate to personal data processed for the special purposes may apply to the Commissioner for assistance in relation to those proceedings.
(2)The Commissioner shall, as soon as reasonably practicable after receiving an application under subsection (1), consider it and decide whether and to what extent to grant it, but he shall not grant the application unless, in his opinion, the case involves a matter of substantial public importance.
(3)If the Commissioner decides to provide assistance, he shall, as soon as reasonably practicable after making the decision, notify the applicant, stating the extent of the assistance to be provided.
(4)If the Commissioner decides not to provide assistance, he shall, as soon as reasonably practicable after making the decision, notify the applicant of his decision and, if he thinks fit, the reasons for it.
(5)In this section—
(a)references to “proceedings” include references to prospective proceedings, and
(b)“applicant”, in relation to assistance under this section, means an individual who applies for assistance.
(6)Schedule 10 has effect for supplementing this section.
(1)The Commissioner—
(a)shall continue to be the designated authority in the United Kingdom for the purposes of Article 13 of the Convention, and
(b)shall be the supervisory authority in the United Kingdom for the purposes of the Data Protection Directive [F11 and the Data Protection Framework Decision].
(2)The [F12 Secretary of State] may by order make provision as to the functions to be discharged by the Commissioner as the designated authority in the United Kingdom for the purposes of Article 13 of the Convention.
(3)The [F12 Secretary of State] may by order make provision as to co-operation by the Commissioner with the European Commission and with supervisory authorities in other EEA States in connection with the performance of their respective duties and, in particular, as to—
(a)the exchange of information with supervisory authorities in other EEA States or with the European Commission, F13...
(b)the exercise within the United Kingdom at the request of a supervisory authority in another EEA State, in cases excluded by section 5 from the application of the other provisions of this Act, of functions of the Commissioner specified in the order [F14, and
(c) the exercise within the United Kingdom at the request of a supervisory authority in another EEA State, in cases falling within the scope of the Data Protection Framework Decision as it applies to that State, of functions of the Commissioner specified in the order. ]
(4)The Commissioner shall also carry out any data protection functions which the [F12 Secretary of State] may by order direct him to carry out for the purpose of enabling Her Majesty’s Government in the United Kingdom to give effect to any international obligations of the United Kingdom.
(5)The Commissioner shall, if so directed by the [F12 Secretary of State] , provide any authority exercising data protection functions under the law of a colony specified in the direction with such assistance in connection with the discharge of those functions as the [F12 Secretary of State] may direct or approve, on such terms (including terms as to payment) as the [F12 Secretary of State] may direct or approve.
(6)Where the European Commission makes a decision for the purposes of Article 26(3) or (4) of the Data Protection Directive under the procedure provided for in Article 31(2) of the Directive, the Commissioner shall comply with that decision in exercising his functions under paragraph 9 of Schedule 4 or, as the case may be, paragraph 8 of that Schedule.
(7)The Commissioner shall inform the European Commission and the supervisory authorities in other EEA States—
(a)of any approvals granted for the purposes of paragraph 8 of Schedule 4, and
(b)of any authorisations granted for the purposes of paragraph 9 of that Schedule.
(8)In this section—
“the Convention” means the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data which was opened for signature on 28th January 1981;
[F15 “the Data Protection Framework Decision” means the Council Framework Decision 2008/977/ JHA of 27th November 2008 on the protection of personal data processed in the framework of police and judicial cooperation in criminal matters; ]
“data protection functions” means functions relating to the protection of individuals with respect to the processing of personal information.
Textual Amendments
F11Words in s. 54(1)(b) inserted (3.12.2014) by The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141), regs. 1(b), 52(b)(i)
F12Words in s. 54 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)
F13Word in s. 54(3) omitted (3.12.2014) by virtue of The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141), regs. 1(b), 52(b)(ii)
F14S. 54(3)(c) and word inserted (3.12.2014) by The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141), regs. 1(b), 52(b)(iii)
F15Words in s. 54(8) inserted (3.12.2014) by The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141), regs. 1(b), 52(b)(iv)
Commencement Information
I2S. 54 wholly in force at 1.3.2000; s. 54 in force for certain purposes at Royal Assent see s. 75(2)(i); s. 54 in force at 1.3.2000 insofar as not already in force by S.I. 2000/183, art. 2(1)
(1)The Commissioner may inspect any personal data recorded in—
(a)the Schengen information system,
(b)the Europol information system,
(c)the Customs information system.
(2)The power conferred by subsection (1) is exercisable only for the purpose of assessing whether or not any processing of the data has been or is being carried out in compliance with this Act.
(3)The power includes power to inspect, operate and test equipment which is used for the processing of personal data.
(4)Before exercising the power, the Commissioner must give notice in writing of his intention to do so to the data controller.
(5)But subsection (4) does not apply if the Commissioner considers that the case is one of urgency.
(6)Any person who—
(a)intentionally obstructs a person exercising the power conferred by subsection (1), or
(b)fails without reasonable excuse to give any person exercising the power any assistance he may reasonably require,
is guilty of an offence.
(7)In this section—
“the Customs information system” means the information system established under Chapter II of the Convention on the Use of Information Technology for Customs Purposes,
“the Europol information system” means the information system established under Title II of the Convention on the Establishment of a European Police Office,
“the Schengen information system” means the information system established under Title IV of the Convention implementing the Schengen Agreement of 14th June 1985, or any system established in its place in pursuance of any [F17 EU] obligation.]
Textual Amendments
F16S. 54A inserted (26.4.2004) by Crime (International Co-operation) Act 2003 (c. 32), ss. 81, 94; S.I. 2004/786, art. 3
F17Word in s. 54A(7) substituted (22.4.2011) by The Treaty of Lisbon (Changes in Terminology) Order 2011 (S.I. 2011/1043), art. 6(1) (with application as mentioned in art. 3(3))
The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Whole Act you have selected contains over 200 provisions and might take some time to download.
Would you like to continue?
The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.
Original (As Enacted or Made): The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.
Point in Time: This becomes available after navigating to view revised legislation as it stood at a certain point in time via Advanced Features > Show Timeline of Changes or via a point in time advanced search.
Geographical Extent: Indicates the geographical area that this provision applies to. For further information see ‘Frequently Asked Questions’.
Show Timeline of Changes: See how this legislation has or could change over time. Turning this feature on will show extra navigation options to go to these specific points in time. Return to the latest available version by using the controls above in the What Version box.
Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:
This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.
Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:
Click 'View More' or select 'More Resources' tab for additional information including: