Data Protection Act 2018

Sch. 10 para. 7 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(d)

Sch. 19 para. 230 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 7 para. 30 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

Pt. 2 Ch. 2 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 7 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 78(7) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 10(10); S.I. 2026/82, reg. 2(z10)

Sch. 19 para. 119 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 12 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 207(4) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 87(6) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 24(2)(c) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 32(3)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words and comma in s. 117 omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 49(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 1 para. 6 modified by S.I. 1999/3145, art. 9(1)(2) (as substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 238 (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g))

Sch. 19 para. 162 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

S. 82(4) inserted (19.6.2025 for specified purposes, 17.11.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 89(2)(d), 142(1)(2)(h); S.I. 2025/996, reg. 2(2)(a)

Words in s. 7(4) substituted (25.1.2023) by Advanced Research and Invention Agency Act 2022 (c. 4), s. 13(1), Sch. 3 para. 14(b); S.I. 2023/58, reg. 2

Words in s. 8 omitted (5.2.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 70(7), 142(1); S.I. 2026/82, reg. 2(c)

Words in Sch. 21 para. 10(1) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 25(8)(a) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)

Word in s. 203(1) inserted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 90(8), 142(1); S.I. 2025/996, reg. 2(2)(b)

S. 79(3A) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(b), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Words in Sch. 2 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 54(3A)-(3D) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 76(6)(c), 142(1); S.I. 2026/82, reg. 2(h) (with reg. 4)

Words in Sch. 2 para. 27(3)(a) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 87(2)(c)(i), 142(1); S.I. 2026/82, reg. 2(o)

S. 175 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(f)

Words in s. 15(2)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(4)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 2 para. 4(1A)-(1C) inserted (31.1.2022) by The Data Protection Act 2018 (Amendment of Schedule 2 Exemptions) Regulations 2022 (S.I. 2022/76), regs. 1(2), 2(2)(b)

Words in s. 1(5) inserted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 90(2), 142(1); S.I. 2025/996, reg. 2(2)(b)

Sch. 19 para. 384 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 1 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 184 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 206 Table inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 100(11), 142(1); S.I. 2026/82, reg. 2(s)

Sch. 21 para. 6(3) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 25(4)(c) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)

Words in Sch. 3 para. 11 substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(12) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Word in Sch. 11 para. 2(a) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 31; S.I. 2026/82, reg. 2(z12)

Sch. 11 para. 3 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(d)

Words in s. 206 Table inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 117(5), 142(1); S.I. 2025/904, reg. 2(r)

Sch. 20 para. 53 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 71 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 96 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

S. 3(11) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(6) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 18 heading inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 24(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 78(2) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 10(5)(b); S.I. 2026/82, reg. 2(z10)

Sch. 7 para. 50 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

Word in s. 205(1) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 85(2)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 277 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 202(1)(a)(i) inserted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 90(7), 142(1); S.I. 2025/996, reg. 2(2)(b)

Words in s. 5(7) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 6(6)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 1 para. 18 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)

Words in s. 16(1)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 20(2)(b)(ii) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 20 para. 47 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 399 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 110(2)(b) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(9)(b), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Sch. 15 para. 9 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(f)

Words in s. 44(7)(a) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(3)(c), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Sch. 19 para. 409 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 1 para. 2(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 91(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 226 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 93 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 20 para. 54 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 75(2) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 6(5); S.I. 2026/82, reg. 2(z10)

Words in s. 79(7) substituted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(e)(i), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Words in s. 79(7) substituted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(e)(ii), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Sch. 19 para. 317 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 379 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 125(9) substituted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 19(4); S.I. 2025/904, reg. 2(y)

Words in Sch. 19 para. 431(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 100(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 155(2)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 63 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 76(1)(e) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 7(4)(d); S.I. 2026/82, reg. 2(z10)

Sch. 19 para. 61 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 294 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 28(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 36(3)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 186(3)(ca) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(10), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Sch. 19 para. 342 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 2 para. 28(3) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 87(2)(c)(ii), 142(1); S.I. 2026/82, reg. 2(o)

Words in s. 159(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 65 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 3(9)(e) and word omitted (20.8.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 14(b); S.I. 2025/904, reg. 2(y)

Sch. 20 para. 31 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 346 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 15(2)(e) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(7)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 74B(6)(a) omitted (5.2.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 5(7)(a); S.I. 2026/82, reg. 2(z10)

Words in s. 83(1) substituted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 90(4)(b), 142(1); S.I. 2025/996, reg. 2(2)(b)

Sch. 19 para. 392 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 91 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

S. 16(2)(c) and word inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 20(3)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 165(7) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 66(5) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 54(2) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 76(6)(b)(i), 142(1); S.I. 2026/82, reg. 2(h) (with reg. 4)

Sch. 19 para. 21 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 87(1)(b) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 71(9)(b)(i), 142(1); S.I. 2026/82, reg. 2(d)

S. 3(9)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(3)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 231 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 264 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 13(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 16 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 114 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 10 para. 8 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(d)

Words in Sch. 16 para. 4(1) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 101(3)(b)(ii), 142(1); S.I. 2026/82, reg. 2(t) (with reg. 6)

Sch. 19 para. 236 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 185(4)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 79 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 324 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 3 para. 15 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)

Sch. 19 para. 200 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 79(5) substituted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(d), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Sch. 20 para. 58 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 7 para. 33 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

Sch. 7 para. 16 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

Words in Sch. 2 para. 18 substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(17) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 9 para. 6 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(d)

Words in s. 78(6) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 10(9)(a); S.I. 2026/82, reg. 2(z10)

Words in Sch. 21 para. 9(1) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 25(6)(a)(i) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)

Sch. 15 para. 16 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(f)

Sch. 7 para. 19 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

S. 190 in force at 23.7.2018 in so far as not already in force by S.I. 2018/625, reg. 3(g)

Words in s. 16(1)(a) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 20(2)(b)(i) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 429 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 36 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 311 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 2 para. 28(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(24)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 78(4) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 45(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 48(3)(d) omitted (5.9.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 88(5)(a), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Sch. 1 para. 14 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)

Sch. 19 para. 253 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 7(4) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 10(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 12 para. 1 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(e)

S. 148 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(f)

S. 9A and cross-heading inserted (19.6.2025 for specified purposes, 20.8.2025 for specified purposes, 5.2.2026 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 72(7), 142(1)(2)(h); S.I. 2025/904, reg. 2(b); S.I. 2026/82, reg. 2(e)

Sch. 1 para. 30 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)

Words in s. 115 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 47(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 13(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 16 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 20 para. 41 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 206 Table omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 86(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 7 para. 40 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

S. 77 heading substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 9(2); S.I. 2026/82, reg. 2(z10)

Sch. 19 para. 272 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 10(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 13(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 67(8) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 39 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 18 para. 4(3)(a)(ia) inserted (1.12.2020) by Sentencing Act 2020 (c. 17), s. 416(1), Sch. 24 para. 297 (with Sch. 27); S.I. 2020/1236, reg. 2

Words in Sch. 13 para. 1(1)(f) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 97(2)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in Sch. 2 para. 4(1C) substituted (8.3.2024) by The Data Protection Act 2018 (Amendment of Schedule 2 Exemptions) Regulations 2024 (S.I. 2024/342), regs. 1(2), 2(4)(b)

Sch. 19 para. 60 in force at 25.5.2018 in so far as not already in force by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 3 para. 7(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(10) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 21(5)(c) and word inserted (25.1.2023) by Advanced Research and Invention Agency Act 2022 (c. 4), s. 13(1), Sch. 3 para. 15(2)(b); S.I. 2023/58, reg. 2

Sch. 19 para. 82 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 20 para. 5 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 5 para. 6(4) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 95(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 67 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

S. 73(A1) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 3(2); S.I. 2026/82, reg. 2(z10)

Words in Sch. 4 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 94(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 288 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 1 para. 23(4) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 73, 142(1); S.I. 2026/82, reg. 2(f)

Words in s. 168(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 69(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 293 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 254 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 295 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 166(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 67 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 205(1A) substituted (31.12.2023 immediately before the end of 2023) by The Data Protection (Fundamental Rights and Freedoms) (Amendment) Regulations 2023 (S.I. 2023/1417), regs. 1(2), 3(3)

S. 78A(2)(e)(ia) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 19 (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)

Words in s. 8 substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 11 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 21 inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 102 (with reg. 5, Sch. 3 para. 111(6)) (as amended by S.I. 2020/1586, regs. 1(2), 5(4)); 2020 c. 1, Sch. 5 para. 1(1)