Data Protection Act 2018

Words in s. 5(7) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 6(6)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 21 para. 4(6) omitted (5.2.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 25(3)(c) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)

Word in s. 3(9)(c) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 14(a); S.I. 2025/904, reg. 2(y)

Words in s. 149(9)(b) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 100(3)(b), 142(1); S.I. 2026/82, reg. 2(s)

Sch. 12 para. 3 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(e)

Sch. 19 para. 386 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 15(2)(f) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(8)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 188(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 82 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Word in s. 125 heading substituted (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 92(3)(a), 142(1)(2)(h); S.I. 2025/904, reg. 2(f)

Sch. 19 para. 316 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 81 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 2 para. 24 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)

Words in s. 15(4) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(10)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 2 para. 4(4) omitted (31.1.2022) by virtue of The Data Protection Act 2018 (Amendment of Schedule 2 Exemptions) Regulations 2022 (S.I. 2022/76), regs. 1(2), 2(2)(d)

Sch. 19 para. 107 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 28(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 36(3)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 255 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 309 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 149(2)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 61 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in Sch. 1 para. 41 substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 91(5) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 133 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 18 para. 2 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 229 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 5(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 6(2)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 14 para. 8 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(e)

Words in s. 15(2)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(4)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 149(2)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 61 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in Sch. 20 para. 50 substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 101(5) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 54(4)-(6) omitted (5.2.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 76(6)(d), 142(1); S.I. 2026/82, reg. 2(h) (with reg. 4)

Words in s. 79(12) substituted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(i), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Sch. 19 para. 166 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 360 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 7 para. 23 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

Sch. 19 para. 186 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 207(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 87(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 20 omitted (20.8.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 15; S.I. 2025/904, reg. 2(y)

Sch. 19 para. 51 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 17 para. 3A and cross-heading inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 100(12)(a), 142(1); S.I. 2026/82, reg. 2(s)

S. 9 omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 12 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 3 para. 16 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)

S. 207(1A) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 87(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 20 para. 44 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 242 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 2 para. 13 substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(12) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 26(2)(d) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 34(3)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 1 para. 25 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)

Word in Sch. 1 para. 10 heading substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 28(2); S.I. 2026/82, reg. 2(z12)

Ss. 148A-148C and cross-heading inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 100(2), 142(1); S.I. 2026/82, reg. 2(s)

Words in s. 3(10) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(4)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 79(13) omitted (5.9.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(j), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Sch. 19 para. 206 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 83 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 235 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 16 para. 4(2) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 101(3)(c), 142(1); S.I. 2026/82, reg. 2(t) (with reg. 6)

Sch. 19 para. 129 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 17(7) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 22(5)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 362 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 8 para. 8(1)(b)(iia) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 30; S.I. 2026/82, reg. 2(z12)

Sch. 10 para. 3 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(d)

S. 115(1) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 47(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 20 para. 60 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

S. 51(4)(aa) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 79(7)(c), 142(1); S.I. 2025/996, reg. 2(1)(a) (with reg. 3)

Sch. 19 para. 189 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 43(1)(d) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 6 para. 12; S.I. 2026/82, reg. 2(z8) (with reg. 5)

Words in s. 15(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(9)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 17(1)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 22(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Word in s. 51(6) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 79(7)(d), 142(1); S.I. 2025/996, reg. 2(1)(a) (with reg. 3)

Words in s. 129(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 54 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 182(7) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 22(4) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)

S. 139(1A)(1B) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 91(4), 142(1) (with s. 91(5)); S.I. 2025/904, reg. 2(e)

Sch. 20 para. 49 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 327 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 3(14)(c) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(7)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 10 para. 9 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(d)

Words in s. 205(1) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 85(2)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 372 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Act modified (6.6.2022) by Dormant Assets Act 2022 (c. 5), ss. 25, 34(3); S.I. 2022/582, reg. 2

Words in s. 206 Table substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 86(5) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 247 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 65 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 17 para. 4 substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 100(12)(b)(i), 142(1); S.I. 2026/82, reg. 2(s)

Sch. 19 para. 144 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 43(1)(b) substituted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 79(2)(b), 142(1); S.I. 2025/996, reg. 2(1)(a) (with reg. 3)

Words in Sch. 3 substituted (1.7.2022) by Health and Care Act 2022 (c. 31), s. 186(6), Sch. 1 para. 1(1)(2); S.I. 2022/734, reg. 2(a), Sch. (with regs. 13, 29, 30)

Sch. 14 para. 6 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(e)

Words in s. 96(1) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 80(4)(a), 142(1); S.I. 2026/82, reg. 2(j) (with reg. 5)

Words in Sch. 1 para. 4(b) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 87(2)(b), 142(1); S.I. 2026/82, reg. 2(o)

Words in s. 28 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 36(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 352 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 16 para. 9 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(f)

Sch. 8 para. 3 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

Sch. 19 para. 53 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 2 para. 11 table omitted (31.12.2020) by virtue of The Consumer Protection (Enforcement) (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/203), regs. 1, 5(a); 2020 c. 1, Sch. 5 para. 1(1)

S. 205(4)(5) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 85(7) (with reg. 5) (as amended by S.I. 2020/1586, regs. 1(2), 5(2)); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 4(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 5(2)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 20 para. 27 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 238 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 261 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 6 cross-heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 8 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 198 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 7 para. 48 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

Sch. 19 para. 343 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Ss. 50A-50D substituted for ss. 49, 50 (19.6.2025 for specified purposes, 5.2.2026 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 80(3), 142(1)(2)(h); S.I. 2026/82, reg. 2(j) (with reg. 5)

Words in s. 3(14)(d) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 4(7)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 7 para. 25 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

Words in Sch. 20 para. 18(6)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 101(4)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 24(5) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 32(5)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 126 in force at 23.7.2018 for specified purposes by S.I. 2018/625, reg. 3(c)

S. 15 cross-heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 18 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 51(2)(aa) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 79(7)(b), 142(1); S.I. 2025/996, reg. 2(1)(a) (with reg. 3)

Words in s. 76(1)(c) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 7(4)(b)(ii); S.I. 2026/82, reg. 2(z10)

Sch. 15 para. 10 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(f)

Words in s. 168(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 69(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Word in Sch. 2 para. 2(1)(a) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 29(2); S.I. 2026/82, reg. 2(z12)

Sch. 20 para. 6 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 149(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 61 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 1 para. 5 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)

Sch. 19 para. 380 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 80(2) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 46(3)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Word in s. 184(4) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 25; S.I. 2026/82, reg. 2(z12)

Sch. 19 para. 167 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 19 para. 94 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

S. 160(7)(e) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 101(4), 142(1); S.I. 2026/82, reg. 2(t) (with reg. 6)

Words in s. 76(1)(c) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 43 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 7 para. 29 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

Sch. 19 para. 28 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 77(7)(a) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 9(4); S.I. 2026/82, reg. 2(z10)

Words in Sch. 18 para. 5(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 99(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 5(4)(5)(6) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 6(5) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 142 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 2 para. 6 cross-heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(10) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 24(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 32(4)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 20 para. 22 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

S. 3(8A) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 117(3), 142(1); S.I. 2025/904, reg. 2(r)

Sch. 19 para. 356 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 3 para. 12 cross-heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(13) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 418 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

S. 73(4)(aa) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 8 para. 3(5)(a); S.I. 2026/82, reg. 2(z10)

Sch. 7 para. 39 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

Words in s. 24(5) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 32(5)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Sch. 19 para. 322 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Sch. 20 para. 12 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in s. 52(1) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 6 para. 13(2); S.I. 2026/82, reg. 2(z8) (with reg. 5)

Sch. 19 para. 319 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

S. 160(4)(aa)(ab) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 98(5), 142(1); S.I. 2026/82, reg. 2(q)

Sch. 19 para. 351 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

S. 140 cross-heading inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 95, 142(1); S.I. 2025/904, reg. 2(h)

Sch. 19 para. 246 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

Words in Sch. 5 para. 1(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 95(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

S. 204(1)(l) inserted (13.12.2024) by The Anaesthesia Associates and Physician Associates Order 2024 (S.I. 2024/374), art. 1(3), Sch. 5 para. 7

Words in s. 149(2)(c) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 61 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Words in s. 110(2)(c) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(9)(c), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

Words in Sch. 1 para. 1(3) substituted (15.12.2021) by The UK Statistics (Amendment etc.) (EU Exit) Regulations 2021 (S.I. 2021/1300), regs. 1, 2