http://www.legislation.gov.uk/ukpga/2018/12/part/1Data Protection Act 2018An Act to make provision for the regulation of the processing of information relating to individuals; to make provision in connection with the Information Commissioner's functions under certain regulations relating to information; to make provision for a direct marketing code of practice; and for connected purposes.texttext/xmlenStatute Law Database2024-05-18Expert Participation2024-03-08 PART 1 PreliminaryOverview11This Act makes provision about the processing of personal data.2Most processing of personal data is subject to the UK GDPR.3Part 2 supplements the UK GDPR.4Part 3 makes provision about the processing of personal data by competent authorities for law enforcement purposes ....5Part 4 makes provision about the processing of personal data by the intelligence services.6Part 5 makes provision about the Information Commissioner.7Part 6 makes provision about the enforcement of the data protection legislation.8Part 7 makes supplementary provision, including provision about the application of this Act to the Crown and to Parliament.Protection of personal data21The UK GDPR and this Act protect individuals with regard to the processing of personal data, in particular by—arequiring personal data to be processed lawfully and fairly, on the basis of the data subject's consent or another specified basis,bconferring rights on the data subject to obtain information about the processing of personal data and to require inaccurate personal data to be rectified, andcconferring functions on the Commissioner, giving the holder of that office responsibility for monitoring and enforcing their provisions.2When carrying out functions under the UK GDPR and this Act, the Commissioner must have regard to the importance of securing an appropriate level of protection for personal data, taking account of the interests of data subjects, controllers and others and matters of general public interest.Terms relating to the processing of personal data31This section defines some terms used in this Act.2Personal data” means any information relating to an identified or identifiable living individual (subject to subsection (14)(c)).3Identifiable living individual” means a living individual who can be identified, directly or indirectly, in particular by reference to—aan identifier such as a name, an identification number, location data or an online identifier, orbone or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the individual.4Processing”, in relation to information, means an operation or set of operations which is performed on information, or on sets of information, such as—acollection, recording, organisation, structuring or storage,badaptation or alteration,cretrieval, consultation or use,ddisclosure by transmission, dissemination or otherwise making available,ealignment or combination, orfrestriction, erasure or destruction,(subject to subsection (14)(c) and sections 5(7), 29(2) and 82(3), which make provision about references to processing in the different Parts of this Act).5Data subject” means the identified or identifiable living individual to whom personal data relates.6“Controller” and “processor”, in relation to the processing of personal data to which ... Part 2, Part 3 or Part 4 applies, have the same meaning as in that ... Part (see sections 5, 6, 32 and 83 and see also subsection (14)(d)).7Filing system” means any structured set of personal data which is accessible according to specific criteria, whether held by automated means or manually and whether centralised, decentralised or dispersed on a functional or geographical basis.8The Commissioner” means the Information Commissioner (see section 114).9The data protection legislation” means—athe UK GDPR,b. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .cthis Act,dregulations made under this Act, anderegulations made under section 2(2) of the European Communities Act 1972 which relate to the EU GDPR or the Law Enforcement Directive.10The UK GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation), as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (and see section 205(4)).10AThe EU GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) as it has effect in EU law.11. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12The Law Enforcement Directive” means Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA.13The Data Protection Convention” means the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data which was opened for signature on 28 January 1981, as amended up to the day on which this Act is passed.14In Parts 5 to 7, except where otherwise provided—areferences to the UK GDPR are to the UK GDPR read with Part 2;b. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .creferences to personal data, and the processing of personal data, are to personal data and processing to which ... Part 2, Part 3 or Part 4 applies;dreferences to a controller or processor are to a controller or processor in relation to the processing of personal data to which ... Part 2, Part 3 or Part 4 applies.15There is an index of defined expressions in section 206.Words in s. 1(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 2(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)Words in s. 1(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 2(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)Words in s. 1(4) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 2(4) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)Words in s. 2(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 3 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)Words in s. 2(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 3 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)Words in s. 3(6) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)S. 3(9)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(3)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)S. 3(9)(b) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(3)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)Words in s. 3(9)(e) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(3)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)Words in s. 3(10) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(4)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)Words in s. 3(10) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(4)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)S. 3(10A) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(5) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)S. 3(11) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(6) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)S. 3(14)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(7)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)S. 3(14)(b) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(7)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)Words in s. 3(14)(c) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(7)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)Words in s. 3(14)(d) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(7)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
This XML file does not appear to have any style information associated with it. The document tree is shown below.
<Legislation xmlns="http://www.legislation.gov.uk/namespaces/legislation" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12" NumberOfProvisions="1116" xsi:schemaLocation="http://www.legislation.gov.uk/namespaces/legislation http://www.legislation.gov.uk/schema/legislation.xsd" SchemaVersion="1.0" RestrictExtent="E+W+S+N.I." RestrictStartDate="2024-03-08">
<ukm:Metadata xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dct="http://purl.org/dc/terms/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:ukm="http://www.legislation.gov.uk/namespaces/metadata">
<dc:identifier>http://www.legislation.gov.uk/ukpga/2018/12/part/1</dc:identifier>
<dc:title>Data Protection Act 2018</dc:title>
<dc:description>An Act to make provision for the regulation of the processing of information relating to individuals; to make provision in connection with the Information Commissioner's functions under certain regulations relating to information; to make provision for a direct marketing code of practice; and for connected purposes.</dc:description>
<dc:type>text</dc:type>
<dc:format>text/xml</dc:format>
<dc:language>en</dc:language>
<dc:publisher>Statute Law Database</dc:publisher>
<dc:modified>2024-05-18</dc:modified>
<dc:contributor>Expert Participation</dc:contributor>
<dct:valid>2024-03-08</dct:valid>
<atom:link rel="self" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/data.xml" type="application/xml"/>
<atom:link rel="http://www.legislation.gov.uk/def/navigation/resources" href="http://www.legislation.gov.uk/ukpga/2018/12/resources" title="More Resources"/>
<atom:link rel="http://www.legislation.gov.uk/def/navigation/notes" href="http://www.legislation.gov.uk/ukpga/2018/12/notes" title="Explanatory Notes"/>
<atom:link rel="http://www.legislation.gov.uk/def/navigation/notes/toc" href="http://www.legislation.gov.uk/ukpga/2018/12/notes/contents" title="Explanatory Notes Table of Contents"/>
<atom:link rel="http://www.legislation.gov.uk/def/navigation/act" href="http://www.legislation.gov.uk/ukpga/2018/12" title="whole act"/>
<atom:link rel="http://www.legislation.gov.uk/def/navigation/introduction" href="http://www.legislation.gov.uk/ukpga/2018/12/introduction" title="introduction"/>
<atom:link rel="http://www.legislation.gov.uk/def/navigation/body" href="http://www.legislation.gov.uk/ukpga/2018/12/body" title="body"/>
<atom:link rel="http://www.legislation.gov.uk/def/navigation/schedules" href="http://www.legislation.gov.uk/ukpga/2018/12/schedules" title="schedules"/>
<atom:link rel="alternate" type="application/rdf+xml" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/data.rdf" title="RDF/XML"/>
<atom:link rel="alternate" type="application/akn+xml" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/data.akn" title="AKN"/>
<atom:link rel="alternate" type="application/xhtml+xml" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/data.xht" title="HTML snippet"/>
<atom:link rel="alternate" type="text/html" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/data.htm" title="Website (XHTML) Default View"/>
<atom:link rel="alternate" type="text/csv" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/data.csv" title="CSV"/>
<atom:link rel="alternate" type="application/pdf" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/data.pdf" title="PDF"/>
<atom:link rel="alternate" type="application/akn+xhtml" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/data.html" title="HTML5 snippet"/>
<atom:link rel="http://purl.org/dc/terms/tableOfContents" hreflang="en" href="http://www.legislation.gov.uk/ukpga/2018/12/contents" title="Table of Contents"/>
<atom:link rel="http://purl.org/dc/terms/replaces" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/2018-05-25" title="2018-05-25"/>
<atom:link rel="http://purl.org/dc/terms/hasVersion" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/enacted" title="enacted"/>
<atom:link rel="http://purl.org/dc/terms/hasVersion" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/2018-05-23" title="2018-05-23"/>
<atom:link rel="http://purl.org/dc/terms/hasVersion" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/2018-05-25" title="2018-05-25"/>
<atom:link rel="http://purl.org/dc/terms/hasVersion" href="http://www.legislation.gov.uk/ukpga/2018/12/part/1/2020-12-31" title="2020-12-31"/>
<atom:link rel="up" href="http://www.legislation.gov.uk/ukpga/2018/12" title="Entire legislation"/>
<atom:link rel="prev" href="http://www.legislation.gov.uk/ukpga/2018/12/introduction" title="Introduction; Introduction"/>
<atom:link rel="prevInForce" href="http://www.legislation.gov.uk/ukpga/2018/12/introduction" title="Introduction; Introduction"/>
<atom:link rel="next" href="http://www.legislation.gov.uk/ukpga/2018/12/part/2" title="Part; Part 2"/>
<atom:link rel="nextInForce" href="http://www.legislation.gov.uk/ukpga/2018/12/part/2" title="Part; Part 2"/>
<ukm:PrimaryMetadata>
<ukm:DocumentClassification>
<ukm:DocumentCategory Value="primary"/>
<ukm:DocumentMainType Value="UnitedKingdomPublicGeneralAct"/>
<ukm:DocumentStatus Value="revised"/>
</ukm:DocumentClassification>
<ukm:Year Value="2018"/>
<ukm:Number Value="12"/>
<ukm:EnactmentDate Date="2018-05-23"/>
<ukm:ISBN Value="9780105700128"/>
<ukm:UnappliedEffects>
<ukm:UnappliedEffect AffectedURI="http://www.legislation.gov.uk/id/ukpga/2018/12" Row="302" RequiresApplied="true" AffectedProvisions="Sch. 3 para. 8(1)(y)" AffectingURI="http://www.legislation.gov.uk/id/nia/2022/18" AffectingClass="NorthernIrelandAct" Modified="2024-11-05T10:41:51Z" AffectedClass="UnitedKingdomPublicGeneralAct" URI="http://www.legislation.gov.uk/id/effect/key-45b383b20d73517d1742bc35c1da4b61" AffectingYear="2022" EffectId="key-45b383b20d73517d1742bc35c1da4b61" AffectingNumber="18" AffectedYear="2018" AffectedNumber="12" Type="added" AffectingEffectsExtent="N.I." AffectingProvisions="Sch. 3 para. 78(3)">
<ukm:AffectedTitle>Data Protection Act 2018</ukm:AffectedTitle>
<ukm:AffectedProvisions>
<ukm:Section Ref="schedule-3" URI="http://www.legislation.gov.uk/id/ukpga/2018/12/schedule/3">Sch. 3 </ukm:Section>
<ukm:Section Ref="schedule-3-paragraph-8-1-y" URI="http://www.legislation.gov.uk/id/ukpga/2018/12/schedule/3/paragraph/8/1/y" FoundRef="schedule-3-paragraph-8">para. 8(1)(y)</ukm:Section>
</ukm:AffectedProvisions>
<ukm:AffectingTitle>Adoption and Children Act (Northern Ireland) 2022</ukm:AffectingTitle>
<ukm:AffectingProvisions>
<ukm:Section Ref="schedule-3" URI="http://www.legislation.gov.uk/id/nia/2022/18/schedule/3">Sch. 3 </ukm:Section>
<ukm:Section Ref="schedule-3-paragraph-78-3" URI="http://www.legislation.gov.uk/id/nia/2022/18/schedule/3/paragraph/78/3">para. 78(3)</ukm:Section>
</ukm:AffectingProvisions>
<ukm:CommencementAuthority>
<ukm:Section Ref="section-160-1" URI="http://www.legislation.gov.uk/id/nia/2022/18/section/160/1">s. 160(1)</ukm:Section>
</ukm:CommencementAuthority>
<ukm:InForceDates>
<ukm:InForce Applied="false" Prospective="true" Qualification=""/>
</ukm:InForceDates>
</ukm:UnappliedEffect>
<ukm:UnappliedEffect AffectingEffectsExtent="E+W+S+N.I." AffectingURI="http://www.legislation.gov.uk/id/uksi/2024/374" AffectedYear="2018" AffectedProvisions="s. 204(1)(l)" AffectedClass="UnitedKingdomPublicGeneralAct" URI="http://www.legislation.gov.uk/id/effect/uksi-2024-374-cosktgk5-21" AffectingNumber="374" AffectingYear="2024" RequiresApplied="true" AffectedNumber="12" AffectedURI="http://www.legislation.gov.uk/id/ukpga/2018/12" Row="21" AffectingClass="UnitedKingdomStatutoryInstrument" Type="inserted" AffectingProvisions="Sch. 5 para. 7" EffectId="key-948150c615699b482cbd70f81369f052" Created="2024-03-22T09:02:34Z">
<ukm:AffectedTitle>Data Protection Act 2018</ukm:AffectedTitle>
<ukm:AffectedProvisions>
<ukm:Section Ref="section-204-1-l" URI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/204/1/l" FoundRef="section-204">s. 204(1)(l)</ukm:Section>
</ukm:AffectedProvisions>
<ukm:AffectingTitle>The Anaesthesia Associates and Physician Associates Order 2024</ukm:AffectingTitle>
<ukm:AffectingProvisions>
<ukm:Section Ref="schedule-5" URI="http://www.legislation.gov.uk/id/uksi/2024/374/schedule/5">Sch. 5 </ukm:Section>
<ukm:Section Ref="schedule-5-paragraph-7" URI="http://www.legislation.gov.uk/id/uksi/2024/374/schedule/5/paragraph/7">para. 7</ukm:Section>
</ukm:AffectingProvisions>
<ukm:CommencementAuthority>
<ukm:Section Ref="article-1-3" URI="http://www.legislation.gov.uk/id/uksi/2024/374/article/1/3">art. 1(3)</ukm:Section>
</ukm:CommencementAuthority>
<ukm:InForceDates>
<ukm:InForce Applied="false" Date="2024-12-13" Qualification="wholly in force"/>
</ukm:InForceDates>
</ukm:UnappliedEffect>
<ukm:UnappliedEffect Row="77" URI="http://www.legislation.gov.uk/id/effect/key-8f2b2401a00979810a31b65e3185a134" AffectedProvisions="s. 13A" AffectingNumber="21" RequiresApplied="true" EffectId="key-8f2b2401a00979810a31b65e3185a134" AffectingURI="http://www.legislation.gov.uk/id/ukpga/2024/21" AffectingClass="UnitedKingdomPublicGeneralAct" Type="inserted" AffectedYear="2018" Modified="2024-09-26T11:27:25Z" AffectingProvisions="s. 31(4)" Comments="Contains power" AffectingYear="2024" AffectedClass="UnitedKingdomPublicGeneralAct" AffectingEffectsExtent="E+W" AffectedNumber="12" AffectedURI="http://www.legislation.gov.uk/id/ukpga/2018/12">
<ukm:AffectedTitle>Data Protection Act 2018</ukm:AffectedTitle>
<ukm:AffectedProvisions>
<ukm:Section xmlns:err="http://www.legislation.gov.uk/namespaces/error" Ref="section-13A" URI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/13A" err:Ref="Section missing in legislation" Missing="true">s. 13A</ukm:Section>
</ukm:AffectedProvisions>
<ukm:AffectingTitle>Victims and Prisoners Act 2024</ukm:AffectingTitle>
<ukm:AffectingProvisions>
<ukm:Section Ref="section-31-4" URI="http://www.legislation.gov.uk/id/ukpga/2024/21/section/31/4">s. 31(4)</ukm:Section>
</ukm:AffectingProvisions>
<ukm:Savings>
<ukm:Section Ref="section-32" URI="http://www.legislation.gov.uk/id/ukpga/2024/21/section/32">s. 32</ukm:Section>
</ukm:Savings>
<ukm:CommencementAuthority>
<ukm:Section Ref="section-81-2" URI="http://www.legislation.gov.uk/id/ukpga/2024/21/section/81/2">s. 81(2)</ukm:Section>
</ukm:CommencementAuthority>
<ukm:InForceDates>
<ukm:InForce Applied="false" Prospective="true" Qualification=""/>
</ukm:InForceDates>
</ukm:UnappliedEffect>
</ukm:UnappliedEffects>
</ukm:PrimaryMetadata>
<ukm:Notes>
<ukm:Note IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/notes"/>
<ukm:Alternatives>
<ukm:Alternative URI="http://www.legislation.gov.uk/ukpga/2018/12/pdfs/ukpgaen_20180012_en.pdf" Date="2022-01-13" Title="Explanatory Note" Size="1240195"/>
</ukm:Alternatives>
</ukm:Notes>
<ukm:CorrectionSlips>
<ukm:CorrectionSlip URI="http://www.legislation.gov.uk/ukpga/2018/12/pdfs/ukpgacs_20180012_en_001.pdf" Date="2019-08-19" Title="Correction Slip 1" Size="101314"/>
</ukm:CorrectionSlips>
<ukm:Alternatives>
<ukm:Alternative URI="http://www.legislation.gov.uk/ukpga/2018/12/pdfs/ukpga_20180012_en.pdf" Date="2018-05-24" Size="3060320"/>
</ukm:Alternatives>
<ukm:Statistics>
<ukm:TotalParagraphs Value="1130"/>
<ukm:BodyParagraphs Value="224"/>
<ukm:ScheduleParagraphs Value="906"/>
<ukm:AttachmentParagraphs Value="0"/>
<ukm:TotalImages Value="0"/>
</ukm:Statistics>
</ukm:Metadata>
<Primary>
<Body DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/body" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/body" NumberOfProvisions="224" RestrictStartDate="2024-01-01">
<Part DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/part/1" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/part/1" NumberOfProvisions="3" id="part-1" RestrictStartDate="2020-12-31">
<Number>
<Strong>PART 1</Strong>
</Number>
<Title>Preliminary</Title>
<P1group RestrictStartDate="2020-12-31">
<Title>Overview</Title>
<P1 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/1" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1" id="section-1">
<Pnumber PuncAfter="">1</Pnumber>
<P1para>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/1/1" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/1" id="section-1-1">
<Pnumber>1</Pnumber>
<P2para>
<Text>This Act makes provision about the processing of personal data.</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/1/2" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/2" id="section-1-2">
<Pnumber>2</Pnumber>
<P2para>
<Text>
Most processing of personal data is subject to the
<Substitution ChangeId="key-0980e055af9390b4571e201b8f8aafaa-1625128224608" CommentaryRef="key-0980e055af9390b4571e201b8f8aafaa">UK GDPR</Substitution>
.
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/1/3" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/3" id="section-1-3">
<Pnumber>3</Pnumber>
<P2para>
<Text>
Part 2 supplements the
<Substitution ChangeId="key-29e112b63328c8a746536836db1c3966-1625128255299" CommentaryRef="key-29e112b63328c8a746536836db1c3966">UK GDPR</Substitution>
.
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/1/4" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/4" id="section-1-4">
<Pnumber>4</Pnumber>
<P2para>
<Text>
Part 3 makes provision about the processing of personal data by competent authorities for law enforcement purposes
<CommentaryRef Ref="key-9a8be2cf53d7c39ed62f2d07d32d1c20"/>
....
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/1/5" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/5" id="section-1-5">
<Pnumber>5</Pnumber>
<P2para>
<Text>Part 4 makes provision about the processing of personal data by the intelligence services.</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/1/6" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/6" id="section-1-6">
<Pnumber>6</Pnumber>
<P2para>
<Text>Part 5 makes provision about the Information Commissioner.</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/1/7" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/7" id="section-1-7">
<Pnumber>7</Pnumber>
<P2para>
<Text>Part 6 makes provision about the enforcement of the data protection legislation.</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/1/8" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/8" id="section-1-8">
<Pnumber>8</Pnumber>
<P2para>
<Text>Part 7 makes supplementary provision, including provision about the application of this Act to the Crown and to Parliament.</Text>
</P2para>
</P2>
</P1para>
</P1>
</P1group>
<P1group RestrictStartDate="2020-12-31">
<Title>Protection of personal data</Title>
<P1 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/2" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/2" id="section-2">
<Pnumber PuncAfter="">2</Pnumber>
<P1para>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/2/1" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/2/1" id="section-2-1">
<Pnumber>1</Pnumber>
<P2para>
<Text>
The
<Substitution ChangeId="key-e7856245e743d7a5de4a1d03a5a413ed-1625128621388" CommentaryRef="key-e7856245e743d7a5de4a1d03a5a413ed">UK GDPR</Substitution>
and this Act protect individuals with regard to the processing of personal data, in particular by—
</Text>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/2/1/a" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/2/1/a" id="section-2-1-a">
<Pnumber>a</Pnumber>
<P3para>
<Text>requiring personal data to be processed lawfully and fairly, on the basis of the data subject's consent or another specified basis,</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/2/1/b" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/2/1/b" id="section-2-1-b">
<Pnumber>b</Pnumber>
<P3para>
<Text>conferring rights on the data subject to obtain information about the processing of personal data and to require inaccurate personal data to be rectified, and</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/2/1/c" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/2/1/c" id="section-2-1-c">
<Pnumber>c</Pnumber>
<P3para>
<Text>conferring functions on the Commissioner, giving the holder of that office responsibility for monitoring and enforcing their provisions.</Text>
</P3para>
</P3>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/2/2" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/2/2" id="section-2-2">
<Pnumber>2</Pnumber>
<P2para>
<Text>
When carrying out functions under the
<Substitution ChangeId="key-2a10ec67b795dad031d7e434ef582e79-1625128649844" CommentaryRef="key-2a10ec67b795dad031d7e434ef582e79">UK GDPR</Substitution>
and this Act, the Commissioner must have regard to the importance of securing an appropriate level of protection for personal data, taking account of the interests of data subjects, controllers and others and matters of general public interest.
</Text>
</P2para>
</P2>
</P1para>
</P1>
</P1group>
<P1group RestrictStartDate="2020-12-31">
<Title>Terms relating to the processing of personal data</Title>
<P1 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3" id="section-3">
<Pnumber PuncAfter="">3</Pnumber>
<P1para>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/1" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/1" id="section-3-1">
<Pnumber>1</Pnumber>
<P2para>
<Text>This section defines some terms used in this Act.</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/2" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/2" id="section-3-2">
<Pnumber>2</Pnumber>
<P2para>
<Text>
<Term id="term-personal-data">Personal data</Term>
” means any information relating to an identified or identifiable living individual (subject to subsection (14)(c)).
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/3" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/3" id="section-3-3">
<Pnumber>3</Pnumber>
<P2para>
<Text>
<Term id="term-identifiable-living-individual">Identifiable living individual</Term>
” means a living individual who can be identified, directly or indirectly, in particular by reference to—
</Text>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/3/a" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/3/a" id="section-3-3-a">
<Pnumber>a</Pnumber>
<P3para>
<Text>an identifier such as a name, an identification number, location data or an online identifier, or</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/3/b" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/3/b" id="section-3-3-b">
<Pnumber>b</Pnumber>
<P3para>
<Text>one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the individual.</Text>
</P3para>
</P3>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/4" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/4" id="section-3-4">
<Pnumber>4</Pnumber>
<P2para>
<Text>
<Term id="term-processing">Processing</Term>
”, in relation to information, means an operation or set of operations which is performed on information, or on sets of information, such as—
</Text>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/4/a" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/4/a" id="section-3-4-a">
<Pnumber>a</Pnumber>
<P3para>
<Text>collection, recording, organisation, structuring or storage,</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/4/b" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/4/b" id="section-3-4-b">
<Pnumber>b</Pnumber>
<P3para>
<Text>adaptation or alteration,</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/4/c" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/4/c" id="section-3-4-c">
<Pnumber>c</Pnumber>
<P3para>
<Text>retrieval, consultation or use,</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/4/d" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/4/d" id="section-3-4-d">
<Pnumber>d</Pnumber>
<P3para>
<Text>disclosure by transmission, dissemination or otherwise making available,</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/4/e" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/4/e" id="section-3-4-e">
<Pnumber>e</Pnumber>
<P3para>
<Text>alignment or combination, or</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/4/f" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/4/f" id="section-3-4-f">
<Pnumber>f</Pnumber>
<P3para>
<Text>restriction, erasure or destruction,</Text>
</P3para>
</P3>
<Text>(subject to subsection (14)(c) and sections 5(7), 29(2) and 82(3), which make provision about references to processing in the different Parts of this Act).</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/5" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/5" id="section-3-5">
<Pnumber>5</Pnumber>
<P2para>
<Text>
<Term id="term-data-subject">Data subject</Term>
” means the identified or identifiable living individual to whom personal data relates.
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/6" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/6" id="section-3-6">
<Pnumber>6</Pnumber>
<P2para>
<Text>
“Controller” and “
<Term id="term-processor">processor</Term>
”, in relation to the processing of personal data to which
<CommentaryRef Ref="key-691fa57eec6836b5b51677125f451067"/>
... Part 2, Part 3 or Part 4 applies, have the same meaning as in that
<CommentaryRef Ref="key-691fa57eec6836b5b51677125f451067"/>
... Part (see sections 5, 6, 32 and 83 and see also subsection (14)(d)).
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/7" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/7" id="section-3-7">
<Pnumber>7</Pnumber>
<P2para>
<Text>
<Term id="term-filing-system">Filing system</Term>
” means any structured set of personal data which is accessible according to specific criteria, whether held by automated means or manually and whether centralised, decentralised or dispersed on a functional or geographical basis.
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/8" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/8" id="section-3-8">
<Pnumber>8</Pnumber>
<P2para>
<Text>
<Term id="term-the-commissioner">The Commissioner</Term>
” means the Information Commissioner (see section 114).
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/9" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/9" id="section-3-9">
<Pnumber>9</Pnumber>
<P2para>
<Text>
<Term id="term-the-data-protection-legislation">The data protection legislation</Term>
” means—
</Text>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/9/a" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/9/a" id="section-3-9-a">
<Pnumber>
<Substitution ChangeId="key-542d243b9191f7169b7009b1177f80e5-1625128949781" CommentaryRef="key-542d243b9191f7169b7009b1177f80e5">a</Substitution>
</Pnumber>
<P3para>
<Text>
<Substitution ChangeId="key-542d243b9191f7169b7009b1177f80e5-1625128949781" CommentaryRef="key-542d243b9191f7169b7009b1177f80e5">the UK GDPR,</Substitution>
</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/9/b" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/9/b" id="section-3-9-b">
<Pnumber>
<CommentaryRef Ref="key-044a7ac5d319a0ffb7c00ed7636fa913"/>
b
</Pnumber>
<P3para>
<Text>. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/9/c" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/9/c" id="section-3-9-c">
<Pnumber>c</Pnumber>
<P3para>
<Text>this Act,</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/9/d" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/9/d" id="section-3-9-d">
<Pnumber>d</Pnumber>
<P3para>
<Text>regulations made under this Act, and</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/9/e" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/9/e" id="section-3-9-e">
<Pnumber>e</Pnumber>
<P3para>
<Text>
regulations made under section 2(2) of the European Communities Act 1972 which relate to
<Substitution ChangeId="key-084b887a076ea35667f44af638a1383c-1625128993996" CommentaryRef="key-084b887a076ea35667f44af638a1383c">the EU GDPR</Substitution>
or the Law Enforcement Directive.
</Text>
</P3para>
</P3>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/10" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/10" id="section-3-10">
<Pnumber>10</Pnumber>
<P2para>
<Text>
<Term id="term-the-gdpr">
<Substitution ChangeId="key-39a195e0216d6cbc9ebfe1cdd1c18fcd-1625129015841" CommentaryRef="key-39a195e0216d6cbc9ebfe1cdd1c18fcd">The UK GDPR</Substitution>
</Term>
” means
<Citation URI="http://www.legislation.gov.uk/id/eur/2016/679" id="cc00001" Class="EuropeanUnionRegulation" Year="2016" Number="0679">Regulation (EU) 2016/679</Citation>
of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data
<Substitution ChangeId="key-822383846c852126639e302c4f8d3d5e-1625129075129" CommentaryRef="key-822383846c852126639e302c4f8d3d5e">(United Kingdom General Data Protection Regulation), as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (and see section 205(4))</Substitution>
.
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/10A" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/10A" id="section-3-10A">
<Pnumber>
<Addition ChangeId="key-a0127af1ada079caf6957dccac2808db-1625129119584" CommentaryRef="key-a0127af1ada079caf6957dccac2808db">10A</Addition>
</Pnumber>
<P2para>
<Text>
<Addition ChangeId="key-a0127af1ada079caf6957dccac2808db-1625129119584" CommentaryRef="key-a0127af1ada079caf6957dccac2808db"></Addition>
<Term>
<Addition ChangeId="key-a0127af1ada079caf6957dccac2808db-1625129119584" CommentaryRef="key-a0127af1ada079caf6957dccac2808db">The EU GDPR</Addition>
</Term>
<Addition ChangeId="key-a0127af1ada079caf6957dccac2808db-1625129119584" CommentaryRef="key-a0127af1ada079caf6957dccac2808db">” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) as it has effect in EU law.</Addition>
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/11" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/11" id="section-3-11">
<Pnumber>
<CommentaryRef Ref="key-4c20a14917f2c9b020b67a5f513a0f57"/>
11
</Pnumber>
<P2para>
<Text>. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/12" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/12" id="section-3-12">
<Pnumber>12</Pnumber>
<P2para>
<Text>
<Term id="term-the-law-enforcement-directive">The Law Enforcement Directive</Term>
” means
<Citation URI="http://www.legislation.gov.uk/id/eudr/2016/680" id="cc00002" Class="EuropeanUnionDirective" Year="2016" Number="0680">Directive (EU) 2016/680</Citation>
of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA.
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/13" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/13" id="section-3-13">
<Pnumber>13</Pnumber>
<P2para>
<Text>
<Term id="term-the-data-protection-convention">The Data Protection Convention</Term>
” means the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data which was opened for signature on 28 January 1981, as amended up to the day on which this Act is passed.
</Text>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/14" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/14" id="section-3-14">
<Pnumber>14</Pnumber>
<P2para>
<Text>In Parts 5 to 7, except where otherwise provided—</Text>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/14/a" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/14/a" id="section-3-14-a">
<Pnumber>
<Substitution ChangeId="key-39b8862f2d1f7dfd1e97471a115f8bff-1625129159421" CommentaryRef="key-39b8862f2d1f7dfd1e97471a115f8bff">a</Substitution>
</Pnumber>
<P3para>
<Text>
<Substitution ChangeId="key-39b8862f2d1f7dfd1e97471a115f8bff-1625129159421" CommentaryRef="key-39b8862f2d1f7dfd1e97471a115f8bff">references to the UK GDPR are to the UK GDPR read with Part 2;</Substitution>
</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/14/b" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/14/b" id="section-3-14-b">
<Pnumber>
<CommentaryRef Ref="key-d49a6d2b560c968a1b1a08e01ce6a029"/>
b
</Pnumber>
<P3para>
<Text>. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/14/c" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/14/c" id="section-3-14-c">
<Pnumber>c</Pnumber>
<P3para>
<Text>
references to personal data, and the processing of personal data, are to personal data and processing to which
<CommentaryRef Ref="key-8564aee4975abbac8de52f238041a422"/>
... Part 2, Part 3 or Part 4 applies;
</Text>
</P3para>
</P3>
<P3 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/14/d" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/14/d" id="section-3-14-d">
<Pnumber>d</Pnumber>
<P3para>
<Text>
references to a controller or processor are to a controller or processor in relation to the processing of personal data to which
<CommentaryRef Ref="key-8c2497c1133310d316d82accef38e97a"/>
... Part 2, Part 3 or Part 4 applies.
</Text>
</P3para>
</P3>
</P2para>
</P2>
<P2 DocumentURI="http://www.legislation.gov.uk/ukpga/2018/12/section/3/15" IdURI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/3/15" id="section-3-15">
<Pnumber>15</Pnumber>
<P2para>
<Text>There is an index of defined expressions in section 206.</Text>
</P2para>
</P2>
</P1para>
</P1>
</P1group>
</Part>
</Body>
</Primary>
<Commentaries>
<Commentary id="key-0980e055af9390b4571e201b8f8aafaa" Type="F">
<Para>
<Text>
Words in
<CitationSubRef id="c86yjg0z4-00006" SectionRef="section-1-2" URI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/2">s. 1(2)</CitationSubRef>
substituted (31.12.2020) by
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yjg0z4-00007" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yjg0z4-00008" CitationRef="c86yjg0z4-00007" SectionRef="regulation-1-2" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yjg0z4-00009" CitationRef="c86yjg0z4-00007" SectionRef="schedule-2-paragraph-2-2" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/2/2" Operative="true">Sch. 2 para. 2(2)</CitationSubRef>
(with
<CitationSubRef id="c86yjg0z4-00010" CitationRef="c86yjg0z4-00007" SectionRef="regulation-5" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yjg0z4-00011" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yjg0z4-00012" CitationRef="c86yjg0z4-00011" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-29e112b63328c8a746536836db1c3966" Type="F">
<Para>
<Text>
Words in
<CitationSubRef id="c86yjg0z4-00018" SectionRef="section-1-3" URI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/3">s. 1(3)</CitationSubRef>
substituted (31.12.2020) by
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yjg0z4-00019" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yjg0z4-00020" CitationRef="c86yjg0z4-00019" SectionRef="regulation-1-2" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yjg0z4-00021" CitationRef="c86yjg0z4-00019" SectionRef="schedule-2-paragraph-2-3" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/2/3" Operative="true">Sch. 2 para. 2(3)</CitationSubRef>
(with
<CitationSubRef id="c86yjg0z4-00022" CitationRef="c86yjg0z4-00019" SectionRef="regulation-5" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yjg0z4-00023" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yjg0z4-00024" CitationRef="c86yjg0z4-00023" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-9a8be2cf53d7c39ed62f2d07d32d1c20" Type="F">
<Para>
<Text>
Words in
<CitationSubRef id="c86yjg0z4-00030" SectionRef="section-1-4" URI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/1/4">s. 1(4)</CitationSubRef>
omitted (31.12.2020) by virtue of
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yjg0z4-00031" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yjg0z4-00032" CitationRef="c86yjg0z4-00031" SectionRef="regulation-1-2" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yjg0z4-00033" CitationRef="c86yjg0z4-00031" SectionRef="schedule-2-paragraph-2-4" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/2/4" Operative="true">Sch. 2 para. 2(4)</CitationSubRef>
(with
<CitationSubRef id="c86yjg0z4-00034" CitationRef="c86yjg0z4-00031" SectionRef="regulation-5" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yjg0z4-00035" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yjg0z4-00036" CitationRef="c86yjg0z4-00035" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-e7856245e743d7a5de4a1d03a5a413ed" Type="F">
<Para>
<Text>
Words in
<CitationSubRef id="c86ys5m44-00006" SectionRef="section-2-1" URI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/2/1">s. 2(1)</CitationSubRef>
substituted (31.12.2020) by
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86ys5m44-00007" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86ys5m44-00008" CitationRef="c86ys5m44-00007" SectionRef="regulation-1-2" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86ys5m44-00009" CitationRef="c86ys5m44-00007" SectionRef="schedule-2-paragraph-3" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/3" Operative="true">Sch. 2 para. 3</CitationSubRef>
(with
<CitationSubRef id="c86ys5m44-00010" CitationRef="c86ys5m44-00007" SectionRef="regulation-5" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86ys5m44-00011" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86ys5m44-00012" CitationRef="c86ys5m44-00011" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-2a10ec67b795dad031d7e434ef582e79" Type="F">
<Para>
<Text>
Words in
<CitationSubRef id="c86ys5m44-00018" SectionRef="section-2-2" URI="http://www.legislation.gov.uk/id/ukpga/2018/12/section/2/2">s. 2(2)</CitationSubRef>
substituted (31.12.2020) by
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86ys5m44-00019" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86ys5m44-00020" CitationRef="c86ys5m44-00019" SectionRef="regulation-1-2" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86ys5m44-00021" CitationRef="c86ys5m44-00019" SectionRef="schedule-2-paragraph-3" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/3" Operative="true">Sch. 2 para. 3</CitationSubRef>
(with
<CitationSubRef id="c86ys5m44-00022" CitationRef="c86ys5m44-00019" SectionRef="regulation-5" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86ys5m44-00023" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86ys5m44-00024" CitationRef="c86ys5m44-00023" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-691fa57eec6836b5b51677125f451067" Type="F">
<Para>
<Text>
Words in s. 3(6) omitted (31.12.2020) by virtue of
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00019" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00020" CitationRef="c86yxmft4-00019" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00021" CitationRef="c86yxmft4-00019" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/2" SectionRef="schedule-2-paragraph-4-2" Operative="true">Sch. 2 para. 4(2)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00022" CitationRef="c86yxmft4-00019" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00023" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00024" CitationRef="c86yxmft4-00023" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-542d243b9191f7169b7009b1177f80e5" Type="F">
<Para>
<Text>
S. 3(9)(a) substituted (31.12.2020) by
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00032" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00033" CitationRef="c86yxmft4-00032" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00034" CitationRef="c86yxmft4-00032" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/3/a" SectionRef="schedule-2-paragraph-4-3-a" Operative="true">Sch. 2 para. 4(3)(a)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00035" CitationRef="c86yxmft4-00032" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00036" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00037" CitationRef="c86yxmft4-00036" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-044a7ac5d319a0ffb7c00ed7636fa913" Type="F">
<Para>
<Text>
S. 3(9)(b) omitted (31.12.2020) by virtue of
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00042" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00043" CitationRef="c86yxmft4-00042" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00044" CitationRef="c86yxmft4-00042" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/3/b" SectionRef="schedule-2-paragraph-4-3-b" Operative="true">Sch. 2 para. 4(3)(b)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00045" CitationRef="c86yxmft4-00042" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00046" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00047" CitationRef="c86yxmft4-00046" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-084b887a076ea35667f44af638a1383c" Type="F">
<Para>
<Text>
Words in s. 3(9)(e) substituted (31.12.2020) by
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00054" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00055" CitationRef="c86yxmft4-00054" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00056" CitationRef="c86yxmft4-00054" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/3/c" SectionRef="schedule-2-paragraph-4-3-c" Operative="true">Sch. 2 para. 4(3)(c)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00057" CitationRef="c86yxmft4-00054" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00058" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00059" CitationRef="c86yxmft4-00058" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-39a195e0216d6cbc9ebfe1cdd1c18fcd" Type="F">
<Para>
<Text>
Words in s. 3(10) substituted (31.12.2020) by
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00066" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00067" CitationRef="c86yxmft4-00066" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00068" CitationRef="c86yxmft4-00066" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/4/a" SectionRef="schedule-2-paragraph-4-4-a" Operative="true">Sch. 2 para. 4(4)(a)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00069" CitationRef="c86yxmft4-00066" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00070" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00071" CitationRef="c86yxmft4-00070" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-822383846c852126639e302c4f8d3d5e" Type="F">
<Para>
<Text>
Words in s. 3(10) substituted (31.12.2020) by
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00078" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00079" CitationRef="c86yxmft4-00078" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00080" CitationRef="c86yxmft4-00078" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/4/b" SectionRef="schedule-2-paragraph-4-4-b" Operative="true">Sch. 2 para. 4(4)(b)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00081" CitationRef="c86yxmft4-00078" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00082" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00083" CitationRef="c86yxmft4-00082" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-a0127af1ada079caf6957dccac2808db" Type="F">
<Para>
<Text>
S. 3(10A) inserted (31.12.2020) by
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00007" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00008" CitationRef="c86yxmft4-00007" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00009" CitationRef="c86yxmft4-00007" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/5" SectionRef="schedule-2-paragraph-4-5" Operative="true">Sch. 2 para. 4(5)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00010" CitationRef="c86yxmft4-00007" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00011" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00012" CitationRef="c86yxmft4-00011" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-4c20a14917f2c9b020b67a5f513a0f57" Type="F">
<Para>
<Text>
S. 3(11) omitted (31.12.2020) by virtue of
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00088" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00089" CitationRef="c86yxmft4-00088" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00090" CitationRef="c86yxmft4-00088" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/6" SectionRef="schedule-2-paragraph-4-6" Operative="true">Sch. 2 para. 4(6)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00091" CitationRef="c86yxmft4-00088" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00092" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00093" CitationRef="c86yxmft4-00092" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-39b8862f2d1f7dfd1e97471a115f8bff" Type="F">
<Para>
<Text>
S. 3(14)(a) substituted (31.12.2020) by
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00101" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00102" CitationRef="c86yxmft4-00101" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00103" CitationRef="c86yxmft4-00101" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/7/a" SectionRef="schedule-2-paragraph-4-7-a" Operative="true">Sch. 2 para. 4(7)(a)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00104" CitationRef="c86yxmft4-00101" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00105" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00106" CitationRef="c86yxmft4-00105" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-d49a6d2b560c968a1b1a08e01ce6a029" Type="F">
<Para>
<Text>
S. 3(14)(b) omitted (31.12.2020) by virtue of
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00111" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00112" CitationRef="c86yxmft4-00111" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00113" CitationRef="c86yxmft4-00111" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/7/b" SectionRef="schedule-2-paragraph-4-7-b" Operative="true">Sch. 2 para. 4(7)(b)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00114" CitationRef="c86yxmft4-00111" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00115" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00116" CitationRef="c86yxmft4-00115" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-8564aee4975abbac8de52f238041a422" Type="F">
<Para>
<Text>
Words in s. 3(14)(c) omitted (31.12.2020) by virtue of
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00123" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00124" CitationRef="c86yxmft4-00123" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00125" CitationRef="c86yxmft4-00123" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/7/c" SectionRef="schedule-2-paragraph-4-7-c" Operative="true">Sch. 2 para. 4(7)(c)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00126" CitationRef="c86yxmft4-00123" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00127" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00128" CitationRef="c86yxmft4-00127" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
<Commentary id="key-8c2497c1133310d316d82accef38e97a" Type="F">
<Para>
<Text>
Words in s. 3(14)(d) omitted (31.12.2020) by virtue of
<Citation URI="http://www.legislation.gov.uk/id/uksi/2019/419" id="c86yxmft4-00135" Class="UnitedKingdomStatutoryInstrument" Year="2019" Number="419" Title="The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019">The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)</Citation>
,
<CitationSubRef id="c86yxmft4-00136" CitationRef="c86yxmft4-00135" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/1/2" SectionRef="regulation-1-2">reg. 1(2)</CitationSubRef>
,
<CitationSubRef id="c86yxmft4-00137" CitationRef="c86yxmft4-00135" URI="http://www.legislation.gov.uk/id/uksi/2019/419/schedule/2/paragraph/4/7/c" SectionRef="schedule-2-paragraph-4-7-c" Operative="true">Sch. 2 para. 4(7)(c)</CitationSubRef>
(with
<CitationSubRef id="c86yxmft4-00138" CitationRef="c86yxmft4-00135" URI="http://www.legislation.gov.uk/id/uksi/2019/419/regulation/5" SectionRef="regulation-5">reg. 5</CitationSubRef>
);
<Citation URI="http://www.legislation.gov.uk/id/ukpga/2020/1" id="c86yxmft4-00139" Year="2020" Class="UnitedKingdomPublicGeneralAct" Number="1">2020 c. 1</Citation>
,
<CitationSubRef id="c86yxmft4-00140" CitationRef="c86yxmft4-00139" URI="http://www.legislation.gov.uk/id/ukpga/2020/1/schedule/5/paragraph/1/1" SectionRef="schedule-5-paragraph-1-1">Sch. 5 para. 1(1)</CitationSubRef>
</Text>
</Para>
</Commentary>
</Commentaries>
</Legislation>