Data Protection Act 2018
Sch. 20 para. 24 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 181 inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 100(9), 142(1); S.I. 2026/82, reg. 2(s)
Words in s. 24(2)(c) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 16(a) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)
Sch. 19 para. 306 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 250 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
S. 161 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(f)
Sch. 19 para. 404 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 376 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 21: power to amend conferred (19.6.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 142(2)(g), 143(2)
Sch. 19 para. 192 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 72(1)(b) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 2(a); S.I. 2026/82, reg. 2(z10)
Word in Sch. 21 para. 12(1)(a) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 25(9)(b)(ii) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)
Sch. 19 para. 243 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 34 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 87 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 411 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 10 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 24(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 32(2)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
S. 139A inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 95, 142(1); S.I. 2025/904, reg. 2(h)
S. 82(A1) inserted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 89(2)(a), 142(1); S.I. 2025/996, reg. 2(2)(a)
Sch. 15 para. 11 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(f)
Words in Sch. 2 para. 1(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(5)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
S. 154 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(f)
Words in s. 5(1) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 6(2)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 286 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
S. 77 cross-heading substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 8; S.I. 2026/82, reg. 2(z10)
Words in s. 24(5)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 32(5)(d) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 299 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in Sch. 21 para. 6(1)(a) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 25(4)(a) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)
S. 128 omitted (20.8.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 92(5), 142(1); S.I. 2025/904, reg. 2(f)
Words in s. 77(8) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 44 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 169 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 143 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 46 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in Sch. 18 para. 1(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 99(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 1 para. 9 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)
Word in s. 86(7) substituted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 74(7)(b), 142(1); S.I. 2025/904, reg. 2(c)
Words in s. 125(8) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 19(3); S.I. 2025/904, reg. 2(y)
Sch. 20 para. 23 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 26(2)(e) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 34(3)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 11 para. 7 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(d)
Sch. 19 para. 157 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 6 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in Sch. 4 para. 1 cross-heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 94(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 123 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 36(1)(a) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 71(8)(a), 142(1); S.I. 2026/82, reg. 2(d)
S. 163 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(f)
Sch. 19 para. 103 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 228 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 7 para. 27 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)
S. 139(2A) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 102(2), 142(1); S.I. 2025/904, reg. 2(i)
Words in s. 205(2) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 85(5)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Words in s. 25(2)(a) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 33(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Words in s. 115(2)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 47(4)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Words in Sch. 2 Pt. 1 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 434 in force at 25.5.2018 in so far as not already in force by S.I. 2018/625, reg. 2(1)(g)
Sch. 7 para. 46 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)
Sch. 19 para. 66 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 341 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 115(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 47(5) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 395 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 17(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 22(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
S. 76(A1) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 7(3); S.I. 2026/82, reg. 2(z10)
Sch. 19 para. 131 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 25(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 33(2)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Words in s. 169(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 70 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 310 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 12 para. 10 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(e)
Words in s. 26(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 34(2)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
S. 125 in force at 23.7.2018 for specified purposes by S.I. 2018/625, reg. 3(b)
Words in s. 187(5) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 81(6) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 7 para. 17 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)
Sch. 19 para. 325 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 115(2) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 47(4)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Words in s. 3(9)(d) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 107(2), 142(1); S.I. 2025/904, reg. 2(l)
Words in s. 74B(4) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 5(5); S.I. 2026/82, reg. 2(z10)
Words in s. 120(6) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 52(4) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 371 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 223 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
S. 73(1)(c) and word inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 3(3)(c); S.I. 2026/82, reg. 2(z10)
Words in Sch. 2 Pt. 4 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(15) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
S. 84(6B) inserted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 90(5)(b), 142(1); S.I. 2025/996, reg. 2(2)(b)
Words in s. 15(2)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(3)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sum in s. 157(6) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 64(5) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 7 para. 10 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)
Sch. 20 para. 45 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 363 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 3(10) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(4)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
S. 3(14)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(7)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 7 para. 5 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)
Words in s. 125(3) substituted (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 92(3)(c), 142(1)(2)(h); S.I. 2025/904, reg. 2(f)
Words in Sch. 2 Pt. 2 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(9) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 27 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 80(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 46(3)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Words in Sch. 1 para. 39(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 91(4) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 215 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in Sch. 2 para. 4(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(8)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 176 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Word in s. 135(3) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 94(2)(d), 142(1); S.I. 2026/82, reg. 2(p)
Sch. 19 para. 43 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
S. 2(2) omitted (20.8.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 91(2), 142(1); S.I. 2025/904, reg. 2(e)
S. 75(4)-(7) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 6(7); S.I. 2026/82, reg. 2(z10)
Ss. 82A-82E inserted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 89(3), 142(1); S.I. 2025/996, reg. 2(2)(a)
Words in Sch. 21 para. 9(3)(a) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 25(6)(b)(ii) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)
Sch. 19 para. 308 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 2 para. 17 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)
Words in s. 17(6) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 22(4)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Words in Sch. 13 para. 1(1)(g) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 97(2)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
S. 15(4A) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(11) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
S. 48(8) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 38 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Words in s. 124(5) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 18(b); S.I. 2025/904, reg. 2(y)
Sch. 1 para. 27 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)
Word in s. 16(2)(a)(ii) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 20(3)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 1 para. 15 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)
S. 71A and cross-heading inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 84(6), 142(1); S.I. 2025/904, reg. 2(d)
Words in s. 185(4)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 79 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 7 para. 15A inserted (1.5.2022 for specified purposes, 5.12.2022 in so far as not already in force) by Armed Forces Act 2021 (c. 35), s. 24(1), Sch. 5 para. 49; S.I. 2022/471, reg. 2(e); S.I. 2022/1095, reg. 4
S. 123 in force at 23.7.2018 by S.I. 2018/625, reg. 3(a)
Sch. 1 para. 6 modified by S.I. 2007/1118, art. 5(1)(2) (as substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 324 (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g))
Words in s. 15(2)(d) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(6)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Words in s. 45(7)(a) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(4)(c), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)
Words in s. 115(2)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 47(4)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Word in s. 155(1)(a) omitted (5.2.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 98(4)(a), 142(1); S.I. 2026/82, reg. 2(q)
Word in s. 129(3) substituted (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 92(6), 142(1)(2)(h); S.I. 2025/904, reg. 2(f)
Words in s. 28(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 36(3)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 20 para. 13 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 73(4)(b)(i) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 3(5)(b); S.I. 2026/82, reg. 2(z10)
Words in s. 15(4) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(10)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 423 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 182(6) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 22(3) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)
Sch. 2 para. 28(4) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(24)(d) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 40 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 406 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g) (with reg. 4)
Sch. 20 para. 59 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 290 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 20 para. 38 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 20 para. 20 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 19 para. 45 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 5(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 6(3)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Word in s. 16(1)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 20(2)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Words in s. 7(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 10(2)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 19 para. 102 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Words in s. 187(1)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 81(3)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Sch. 21 para. 12 renumbered as Sch. 21 para. 12(1) (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 25(9)(a) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)
Sch. 19 para. 252 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 2 para. 5 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)
Sch. 10 para. 4 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(d)
S. 127 in force at 23.7.2018 for specified purposes by S.I. 2018/625, reg. 3(d)
Sch. 19 para. 425 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)
Sch. 1 para. 21 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)
Sch. 8 para. 7 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)
S. 78A inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(7), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)
Reading this document does not replace reading the official text published on legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. We assume no responsibility for any inaccuracies arising from the conversion of the original CLML XML to this format.
This text is published under legislation.gov.uk's own terms of reuse, not a Legalize or public-domain licence.
legislation.gov.uk
Open Government Licence v3.0 (attribution required)
© Crown and database right. Derived from content available under the Open Government Licence v3.0 from legislation.gov.uk.