Data Protection Act 1998

General U.K.

63 Application to Crown. U.K.

(1) This Act binds the Crown.

(2) For the purposes of this Act each government department shall be treated as a person separate from any other government department.

(3) Where the purposes for which and the manner in which any personal data are, or are to be, processed are determined by any person acting on behalf of the Royal Household, the Duchy of Lancaster or the Duchy of Cornwall, the data controller in respect of those data for the purposes of this Act shall be—

(a) in relation to the Royal Household, the Keeper of the Privy Purse,

(b) in relation to the Duchy of Lancaster, such person as the Chancellor of the Duchy appoints, and

(c) in relation to the Duchy of Cornwall, such person as the Duke of Cornwall, or the possessor for the time being of the Duchy of Cornwall, appoints.

(4) Different persons may be appointed under subsection (3)(b) or (c) for different purposes.

(5) Neither a government department nor a person who is a data controller by virtue of subsection (3) shall be liable to prosecution under this Act, but [F1 sections 54A and] 55 and paragraph 12 of Schedule 9 shall apply to a person in the service of the Crown as they apply to any other person.

Textual Amendments

F1 Words in s. 63(5) inserted (26.4.2004) by Crime (International Co-operation) Act 2003 (c. 32), ss. 91, 94, Sch. 5 para. 71; S.I. 2004/786, art. 3

Modifications etc. (not altering text)

C1 S. 63 extended (2.12.1999) by S.I. 1999/3145, arts. 1, 9(3)(c); S.I. 1999/3208, art. 2

[F2 63A Application to Parliament. U.K.

(1) Subject to the following provisions of this section and to section 35A, this Act applies to the processing of personal data by or on behalf of either House of Parliament as it applies to the processing of personal data by other persons.

(2) Where the purposes for which and the manner in which any personal data are, or are to be, processed are determined by or on behalf of the House of Commons, the data controller in respect of those data for the purposes of this Act shall be the Corporate Officer of that House.

(3) Where the purposes for which and the manner in which any personal data are, or are to be, processed are determined by or on behalf of the House of Lords, the data controller in respect of those data for the purposes of this Act shall be the Corporate Officer of that House.

(4) Nothing in subsection (2) or (3) is to be taken to render the Corporate Officer of the House of Commons or the Corporate Officer of the House of Lords liable to prosecution under this Act, but section 55 and paragraph 12 of Schedule 9 shall apply to a person acting on behalf of either House as they apply to any other person.]

Textual Amendments

F2 S. 63A inserted (1.1.2005) by 2000 c. 36, ss. 73, 87(3), Sch. 6 para. 3 (with ss. 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2

64 Transmission of notices etc. by electronic or other means. U.K.

(1) This section applies to—

(a) a notice or request under any provision of Part II,

(b) a notice under subsection (1) of section 24 or particulars made available under that subsection, or

(c) an application under section 41(2),

but does not apply to anything which is required to be served in accordance with rules of court.

(2) The requirement that any notice, request, particulars or application to which this section applies should be in writing is satisfied where the text of the notice, request, particulars or application—

(a) is transmitted by electronic means,

(b) is received in legible form, and

(c) is capable of being used for subsequent reference.

(3) The [F3 Secretary of State] may by regulations provide that any requirement that any notice, request, particulars or application to which this section applies should be in writing is not to apply in such circumstances as may be prescribed by the regulations.

Textual Amendments

F3 Words in s. 64 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)

Commencement Information

I1 S. 64 wholly in force at 1.3.2000; s. 64 in force for certain purposes at Royal Assent see s. 75(2)(i); s. 64 in force at 1.3.2000 insofar as not already in force by S.I. 2000/183, art. 2(1)

65 Service of notices by Commissioner. U.K.

(1) Any notice authorised or required by this Act to be served on or given to any person by the Commissioner may—

(a) if that person is an individual, be served on him—

(i) by delivering it to him, or

(ii) by sending it to him by post addressed to him at his usual or last-known place of residence or business, or

(iii) by leaving it for him at that place;

(b) if that person is a body corporate or unincorporate, be served on that body—

(i) by sending it by post to the proper officer of the body at its principal office, or

(ii) by addressing it to the proper officer of the body and leaving it at that office;

(c) if that person is a partnership in Scotland, be served on that partnership—

(i) by sending it by post to the principal office of the partnership, or

(ii) by addressing it to that partnership and leaving it at that office.

(2) In subsection (1)(b) “principal office”, in relation to a registered company, means its registered office and “proper officer”, in relation to any body, means the secretary or other executive officer charged with the conduct of its general affairs.

(3) This section is without prejudice to any other lawful method of serving or giving a notice.

66 Exercise of rights in Scotland by children. U.K.

(1) Where a question falls to be determined in Scotland as to the legal capacity of a person under the age of sixteen years to exercise any right conferred by any provision of this Act, that person shall be taken to have that capacity where he has a general understanding of what it means to exercise that right.

(2) Without prejudice to the generality of subsection (1), a person of twelve years of age or more shall be presumed to be of sufficient age and maturity to have such understanding as is mentioned in that subsection.

67 Orders, regulations and rules. U.K.

(1) Any power conferred by this Act on the [F4 Secretary of State] to make an order, regulations or rules shall be exercisable by statutory instrument.

(2) Any order, regulations or rules made by the [F4 Secretary of State] under this Act may—

(a) make different provision for different cases, and

(b) make such supplemental, incidental, consequential or transitional provision or savings as the [F4 Secretary of State] considers appropriate;

and nothing in section 7(11), 19(5), 26(1) or 30(4) limits the generality of paragraph (a).

(3) Before making—

(a) an order under any provision of this Act other than section 75(3),

(b) any regulations under this Act other than notification regulations (as defined by section 16(2)),

the [F4 Secretary of State] shall consult the Commissioner.

(4) A statutory instrument containing (whether alone or with other provisions) an order under—

• section 10(2)(b),

• section 12(5)(b),

• section 22(1),

• section 30,

• section 32(3),

• section 38,

• section 56(8),

• paragraph 10 of Schedule 3, or

• paragraph 4 of Schedule 7,

shall not be made unless a draft of the instrument has been laid before and approved by a resolution of each House of Parliament.

(5) A statutory instrument which contains (whether alone or with other provisions)—

(a) an order under—

• section 22(7),

• section 23,

• section 51(3),

• section 54(2), (3) or (4),

• paragraph 3, 4 or 14 of Part II of Schedule 1,

• paragraph 6 of Schedule 2,

• paragraph 2, 7 or 9 of Schedule 3,

• paragraph 4 of Schedule 4,

• paragraph 6 of Schedule 7,

(b) regulations under section 7 which—

(i) prescribe cases for the purposes of subsection (2)(b),

(ii) are made by virtue of subsection (7), or

(iii) relate to the definition of “the prescribed period”,

(c) regulations under section 8(1) [F5 , 9(3) or 9A(5)],

(d) regulations under section 64,

(e) notification regulations (as defined by section 16(2)), or

(f) rules under paragraph 7 of Schedule 6,

and which is not subject to the requirement in subsection (4) that a draft of the instrument be laid before and approved by a resolution of each House of Parliament, shall be subject to annulment in pursuance of a resolution of either House of Parliament.

(6) A statutory instrument which contains only—

(a) regulations prescribing fees for the purposes of any provision of this Act, or

(b) regulations under section 7 prescribing fees for the purposes of any other enactment,

shall be laid before Parliament after being made.

Textual Amendments

F4 Words in s. 67 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)

F5 Words in s. 67(5)(c) substituted (30.11.2000 for certain purposes and otherwise 1.1.2005) by 2000 c. 36, ss. 69(3), 87(1)(3) (with ss. 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2

Modifications etc. (not altering text)

C2 S. 67(1)(2)(5)(f) applied (with modifications) (11.12.2003) by The Privacy and Electronic Communications (EC Directive) Regulations 2003 (S.I. 2003/2426), reg. 28(8)(d) (with regs. 4, 15(3), 28, 29)

68 Meaning of “accessible record”. U.K.

(1) In this Act “accessible record” means—

(a) a health record as defined by subsection (2),

(b) an educational record as defined by Schedule 11, or

(c) an accessible public record as defined by Schedule 12.

(2) In subsection (1)(a) “health record” means any record which—

(a) consists of information relating to the physical or mental health or condition of an individual, and

(b) has been made by or on behalf of a health professional in connection with the care of that individual.

69 Meaning of “health professional”. U.K.

(1) In this Act “health professional” means any of the following—

(a) a registered medical practitioner,

(b) a registered dentist as defined by section 53(1) of the M1 Dentists Act 1984,

[F6 (c) a registered dispensing optician or a registered optometrist within the meaning of the Opticians Act 1989,]

(d) [F7 a registered pharmacist or registered pharmacy technician within the meaning of the Pharmacists and Pharmacy Technicians Order 2007] or a registered person as defined by Article 2(2) of the M2 Pharmacy (Northern Ireland) Order 1976,

[F8 (e) a registered nurse or midwife]

(f) a registered osteopath as defined by section 41 of the M3 Osteopaths Act 1993,

(g) a registered chiropractor as defined by section 43 of the M4 Chiropractors Act 1994,

(h) any person who is registered as a member of a profession to which [F9 the Health Professions Order 2001] for the time being extends,

(i) a clinical psychologist [F10 or child psychotherapist] ,

(j) F11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(k) a scientist employed by such a body as head of a department.

(2) In subsection (1)(a) “registered medical practitioner” includes any person who is provisionally registered under section 15 or 21 of the M5 Medical Act 1983 and is engaged in such employment as is mentioned in subsection (3) of that section.

(3) In subsection (1) “health service body” means—

(a) a [F12 Strategic Health Authority ][F13 established under section 13 of the National Health Service Act 2006] ,

(b) a Special Health Authority established under [F14 section 28 of that Act, or section 22 of the National Health Service (Wales) Act 2006] ,

[F15 (bb) a Primary Care Trust established under [F16 section 18 of the National Health Service Act 2006] ,]

[F17 (bbb) a Local Health Board established under [F18 section 11 of the National Health Service (Wales) Act 2006] ,]

(c) a Health Board within the meaning of the M6 National Health Service (Scotland) Act 1978,

(d) a Special Health Board within the meaning of that Act,

(e) the managers of a State Hospital provided under section 102 of that Act,

(f) a National Health Service trust first established under section 5 of the M7 National Health Service and Community Care Act 1990 [F19 , section 25 of the National Health Service Act 2006, section 18 of the National Health Service (Wales) Act 2006] or section 12A of the National Health Service (Scotland) Act 1978,

[F20 (fa) an NHS foundation trust;]

(g) a Health and Social Services Board established under Article 16 of the M8 Health and Personal Social Services (Northern Ireland) Order 1972,

(h) a special health and social services agency established under the M9 Health and Personal Social Services (Special Agencies) (Northern Ireland) Order 1990, or

(i) a Health and Social Services trust established under Article 10 of the M10 Health and Personal Social Services (Northern Ireland) Order 1991.

Textual Amendments

F6 S. 69(1)(c) substituted by The Opticians Act 1989 (Amendment) Order 2005 (S.I. 2005/848), art. 28, Sch. 1 para. 12 (with art. 29, Sch. 2) (the amendment coming into force in accordance with art. 1(2)-(6))

F7 Words in s. 69(1)(d) substituted (and coming into force in accordance with art. 1(2)(3)) by The Pharmacists and Pharmacy Technicians Order 2007 (S.I. 2007/289), art. 67, Sch. 1 para. 7

F8 S. 69(1)(e) substituted by The Nursing and Midwifery Order 2001 (S.I. 2002/253), art. 54(3), Sch. 5 para. 14 (with art. 3(18)) (the amendment coming into force in accordance with art. 1(2)(3) of the amending S.I.)

F9 Words in s. 69(1)(h) substituted by The Health Professions Order 2001 (S.I. 2002/254), art. 48(3), Sch. 4 para. 7 (with art. 3(19)) (the amendment coming into force in accordance with art. 1(2)(3) of the amending S.I.)

F10 Words in s. 69(1)(i) substituted (9.7.2003) by The Health Professions Order 2001 (Consequential Amendments) Order 2003 (S.I. 2003/1590), art. 3, Sch. para. 1(a)

F11 S. 69(1)(j) omitted (9.7.2003) by virtue of The Health Professions Order 2001 (Consequential Amendments) Order 2003 (S.I. 2003/1590), art. 3, Sch. para. 1(b)

F12 Words in s. 69(3)(a) inserted (1.10.2002) by The National Health Service Reform and Health Care Professions Act 2002 (Supplementary, Consequential etc. Provisions) Regulations 2002 (S.I. 2002/2469), reg. 4, Sch. 1 para. 24

F13 Words in s. 69(3)(a) substituted (1.3.2007) by National Health Service (Consequential Provisions) Act 2006 (c. 43), ss. 2, 8, Sch. 1 para. 191(a)

F14 Words in s. 69(3)(b) substituted (1.3.2007) by National Health Service (Consequential Provisions) Act 2006 (c. 43), ss. 2, 8, Sch. 1 para. 191(b)

F15 S. 69(3)(bb) inserted (8.2.2000) by S.I. 2000/90, art. 3(1), Sch. 1 para. 33

F16 Words in s. 69(3)(bb) substituted (1.3.2007) by National Health Service (Consequential Provisions) Act 2006 (c. 43), ss. 2, 8, Sch. 1 para. 191(c)

F17 S. 69(3)(bbb) inserted (10.10.2002 for W. and 1.3.2007 otherwise for E.W.) by National Health Service Reform and Health Care Professions Act 2002 (c. 17), ss. 6(2), 42(3), Sch. 5 para. 41; S.I. 2002/2532, art. 2, Sch.; S.I. 2006/1407, arts. 1, 2, Sch. 1 Pt. 2 para. 12

F18 Words in s. 69(3)(bbb) substituted (1.3.2007) by National Health Service (Consequential Provisions) Act 2006 (c. 43), ss. 2, 8, Sch. 1 para. 191(d)

F19 Words in s. 69(3)(f) inserted (1.3.2007) by National Health Service (Consequential Provisions) Act 2006 (c. 43), ss. 2, 8, Sch. 1 para. 191(e)

F20 S. 69(3)(fa) inserted (1.4.2004) by Health and Social Care (Community Health and Standards) Act 2003 (c. 43), ss. 34, 199, Sch. 4 para. 107; S.I. 2004/759, art. 2

Marginal Citations

M1 1984 c. 24.

M2 S.I. 1976/1213 (N.I.22).

M3 1993 c. 21.

M4 1994 c. 17.

M5 1983 c. 54.

M6 1978 c. 29.

M7 1990 c. 19.

M8 S.I. 1972/1265 (N.I.14).

M9 S.I. 1990/247 (N.I.3).

M10 S.I. 1991/194 (N.I.1).

70 Supplementary definitions. U.K.

(1) In this Act, unless the context otherwise requires—

• “business” includes any trade or profession;

• “the Commissioner” means [F21 the Information Commissioner];

• “credit reference agency” has the same meaning as in the M11 Consumer Credit Act 1974;

• “the Data Protection Directive” means Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data;

• “EEA State” means a State which is a contracting party to the Agreement on the European Economic Area signed at Oporto on 2nd May 1992 as adjusted by the Protocol signed at Brussels on 17th March 1993;

• “enactment” includes an enactment passed after this Act [F22 and any enactment comprised in, or in any instrument made under, an Act of the Scottish Parliament];

• “government department” includes a Northern Ireland department and any body or authority exercising statutory functions on behalf of the Crown;

• “Minister of the Crown” has the same meaning as in the Ministers of the M12 Crown Act 1975;

• “public register” means any register which pursuant to a requirement imposed—

  (a)

  by or under any enactment, or

  (b)

  in pursuance of any international agreement,

  is open to public inspection or open to inspection by any person having a legitimate interest;

• “pupil”—

  (a)

  in relation to a school in England and Wales, means a registered pupil within the meaning of the M13 Education Act 1996,

  (b)

  in relation to a school in Scotland, means a pupil within the meaning of the M14 Education (Scotland) Act 1980, and

  (c)

  in relation to a school in Northern Ireland, means a registered pupil within the meaning of the M15 Education and Libraries (Northern Ireland) Order 1986;

• “recipient”, in relation to any personal data, means any person to whom the data are disclosed, including any person (such as an employee or agent of the data controller, a data processor or an employee or agent of a data processor) to whom they are disclosed in the course of processing the data for the data controller, but does not include any person to whom disclosure is or may be made as a result of, or with a view to, a particular inquiry by or on behalf of that person made in the exercise of any power conferred by law;

• “registered company” means a company registered under the enactments relating to companies for the time being in force in the United Kingdom;

• “school”—

  (a)

  in relation to England and Wales, has the same meaning as in the Education Act 1996,

  (b)

  in relation to Scotland, has the same meaning as in the Education (Scotland) Act 1980, and

  (c)

  in relation to Northern Ireland, has the same meaning as in the Education and Libraries (Northern Ireland) Order 1986;

• “teacher” includes—

  (a)

  in Great Britain, head teacher, and

  (b)

  in Northern Ireland, the principal of a school;

• “third party”, in relation to personal data, means any person other than—

  (a)

  the data subject,

  (b)

  the data controller, or

  (c)

  any data processor or other person authorised to process data for the data controller or processor;

• “the Tribunal” means [F23 the Information Tribunal]..

(2) For the purposes of this Act data are inaccurate if they are incorrect or misleading as to any matter of fact.

Textual Amendments

F21 Words in s. 70(1) substituted (30.1.2001) by 2000 c. 36, ss. 18(4), 87(2)(c), Sch. 2 Pt. I para. 14(a) (with ss. 7(1)(7), 56, 78)

F22 Words inserted (1.7.1999) in definition of “enactment” in s. 70(1) by S.I. 1999/1820, arts. 1(2), 4, Sch. 2 Pt. I para. 133; S.I. 1999/3178, art. 3

F23 Words in s. 70(1) substituted (14.5.2001) by 2000 c. 36, s. 18(4), Sch. 2 Pt. I para. 14(b) (with ss. 7(1)(7), 56, 78); S.I. 2001/1637, art. 2(b)

Marginal Citations

M11 1974 c. 39.

M12 1975 c. 26.

M13 1996 c. 56.

M14 1980 c. 44.

M15 S.I. 1986/594 (N.I.3).

71 Index of defined expressions. U.K.

The following Table shows provisions defining or otherwise explaining expressions used in this Act (other than provisions defining or explaining an expression only used in the same section or Schedule)—

accessible record	section 68
address (in Part III)	section 16(3)
business	section 70(1)
the Commissioner	section 70(1)
credit reference agency	section 70(1)
data	section 1(1)
data controller	sections 1(1) and (4) and 63(3)
data processor	section 1(1)
the Data Protection Directive	section 70(1)
data protection principles	section 4 and Schedule 1
data subject	section 1(1)
disclosing (of personal data)	section 1(2)(b)
EEA State	section 70(1)
enactment	section 70(1)
enforcement notice	section 40(1)
fees regulations (in Part III)	section 16(2)
government department	section 70(1)
health professional	section 69
inaccurate (in relation to data)	section 70(2)
information notice	section 43(1)
Minister of the Crown	section 70(1)
the non-disclosure provisions (in Part IV)	section 27(3)
notification regulations (in Part III)	section 16(2)
obtaining (of personal data)	section 1(2)(a)
personal data	section 1(1)
prescribed (in Part III)	section 16(2)
processing (of information or data)	section 1(1) and paragraph 5 of Schedule 8
[F24 public authority	section 1(1)]
public register	section 70(1)
publish (in relation to journalistic, literary or artistic material)	section 32(6)
pupil (in relation to a school)	section 70(1)
recipient (in relation to personal data)	section 70(1)
recording (of personal data)	section 1(2)(a)
registered company	section 70(1)
registrable particulars (in Part III)	section 16(1)
relevant filing system	section 1(1)
school	section 70(1)
sensitive personal data	section 2
special information notice	section 44(1)
the special purposes	section 3
the subject information provisions (in Part IV)	section 27(2)
teacher	section 70(1)
third party (in relation to processing of personal data)	section 70(1)
the Tribunal	section 70(1)
using (of personal data)	section 1(2)(b).

Textual Amendments

F24 S. 71 Table: entry inserted (1.1.2005) by 2000 c. 36, ss. 68(5), 87(3) (with ss. 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2

72 Modifications of Act. U.K.

During the period beginning with the commencement of this section and ending with 23rd October 2007, the provisions of this Act shall have effect subject to the modifications set out in Schedule 13.

73 Transitional provisions and savings. U.K.

Schedule 14 (which contains transitional provisions and savings) has effect.

74 Minor and consequential amendments and repeals and revocations. U.K.

(1) Schedule 15 (which contains minor and consequential amendments) has effect.

(2) The enactments and instruments specified in Schedule 16 are repealed or revoked to the extent specified.

75 Short title, commencement and extent. U.K.

(1) This Act may be cited as the Data Protection Act 1998.

(2) The following provisions of this Act—

(a) sections 1 to 3,

(b) section 25(1) and (4),

(c) section 26,

(d) sections 67 to 71,

(e) this section,

(f) paragraph 17 of Schedule 5,

(g) Schedule 11,

(h) Schedule 12, and

(i) so much of any other provision of this Act as confers any power to make subordinate legislation,

shall come into force on the day on which this Act is passed.

(3) The remaining provisions of this Act shall come into force on such day as the [F25 Secretary of State] may by order appoint; and different days may be appointed for different purposes.

(4) The day appointed under subsection (3) for the coming into force of section 56 must not be earlier than the first day on which sections 112, 113 and 115 of the M16 Police Act 1997 (which provide for the issue by the Secretary of State of criminal conviction certificates, criminal record certificates and enhanced criminal record certificates) are all in force.

(5) Subject to subsection (6), this Act extends to Northern Ireland.

(6) Any amendment, repeal or revocation made by Schedule 15 or 16 has the same extent as that of the enactment or instrument to which it relates.

Subordinate Legislation Made

P1 S. 75(3) power partly exercised:

1.3.2000 appointed by S.I. 2000/183, art. 2(1) (with art. 2(2))

7.7.2008 appointed by S.I. 2008/1592, art. 2

3.3.2011 appointed by S.I. 2011/601, art. 2

Textual Amendments

F25 Words in s. 75 substituted (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), art. 9, Sch. 2 para. 9(1)(a)

Marginal Citations

M16 1997 c. 50.