Legalize / United Kingdom / Data Protection Act 2018 / History

Reform history

Data Protection Act 2018

32 versions · 2018-05-23

2026-04-07

Data Protection Act 2018

View changes Text at this date

2026-03-31

Data Protection Act 2018

View changes Text at this date

2026-03-10

Data Protection Act 2018

View changes Text at this date

2026-01-29

Data Protection Act 2018

View changes Text at this date

2025-08-19

Data Protection Act 2018

View changes Text at this date

2025-06-19

Data Protection Act 2018

View changes Text at this date

2025-04-01

Data Protection Act 2018

View changes Text at this date

2024-12-13

Data Protection Act 2018

View changes Text at this date

2024-03-08

Data Protection Act 2018

View changes Text at this date

2024-01-01

Data Protection Act 2018

View changes Text at this date

2023-12-31

Data Protection Act 2018

View changes Text at this date

2023-12-26

Data Protection Act 2018

View changes Text at this date

2023-05-05

Data Protection Act 2018

View changes Text at this date

2023-02-01

Data Protection Act 2018

View changes Text at this date

2022-11-30

Data Protection Act 2018

View changes Text at this date

Changes on 2022-11-30

@@ -5948,7 +5948,7 @@

- (o) the managers of a State Hospital provided under section 102 of the National Health Service (Scotland) Act 1978;

- (p) the Regional Health and Social Care Board established under section 7 of the Health and Social Care (Reform) Act (Northern Ireland) 2009 (c. 1 (N.I));

- (p) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

- (q) a special health and social care agency established under the Health and Personal Social Services (Special Agencies) (Northern Ireland) Order 1990 (S.I. 1990/247 (N.I. 3));

@@ -8001,7 +8001,7 @@

- (ii) in the exercise of other functions but obtained or consisting of information obtained in connection with any of the functions mentioned in sub-paragraph (i);

- (b) data processed by the Regional Health and Social Care Board—

- (b) data processed by the Department of Health in Northern Ireland or any person or body exercising functions by virtue of paragraph 22A of Schedule 3 to the Health and Personal Social Services (Northern Ireland) Order 1991—

- (i) in connection with the provision of social care within the meaning of section 2(5) of the Health and Social Care (Reform) Act (Northern Ireland) 2009 (c. 1 (N.I.)), or

@@ -8009,7 +8009,9 @@

- (c) data processed by a Health and Social Care trust—

- (i) in connection with the provision of social care within the meaning of section 2(5) of the Health and Social Care (Reform) Act (Northern Ireland) 2009 (c. 1 (N.I.)) on behalf of the Regional Health and Social Care Board by virtue of an authorisation made under Article 3(1) of the Health and Personal Social Services (Northern Ireland) Order 1994 (S.I. 1994/429 (N.I. 2)), or

- (i) in the exercise of social care and children functions within the meaning of Article 10A of the Health and Personal Social Services (Northern Ireland) Order 1991,

- (ia) in connection with the provision of social care within the meaning of section 2(5) of the Health and Social Care (Reform) Act (Northern Ireland) [2009 (c. 1 (N.I.))](https://www.legislation.gov.uk/nia/2009/1) by virtue of a delegation direction under Article 10B of the Health and Personal Social Services (Northern Ireland) Order 1991, or

- (ii) in the exercise of other functions but obtained or consisting of information obtained in connection with the provision of that care;

@@ -16254,20 +16256,20 @@

- “*the relevant time*” means the time when the amendments of the 2004 Regulations in Schedule 19 to this Act come into force.

#### Protection of personal data

#### Overview

#### Processing to which this Part applies

#### Special categories of personal data etc: supplementary

#### Meaning of “competent authority”

#### Processing to which this Part applies

#### Meaning of “controller” and “processor”

#### Power to reflect changes to the Data Protection Convention

#### Regulations and consultation

#### Index of defined expressions

### Employment, social security and social protection

@@ -17396,12 +17398,16 @@

[^key-2434c3fb6c8b5ee17896e645120e0c61]: Sch. 2 para. 27 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-248079bcb833bce1b84980bc42a826bf]: Words in Sch. 3 para. 8(1)(b) substituted (30.11.2022) by [The Health and Social Care Act (Northern Ireland) 2022 (Consequential Amendments) Order 2022 (S.I. 2022/1174)](https://www.legislation.gov.uk/uksi/2022/1174), [arts. 1(2)](https://www.legislation.gov.uk/uksi/2022/1174/article/1/2), [12(3)(a)](https://www.legislation.gov.uk/uksi/2022/1174/article/12/3/a)

[^key-24c67fb416c38423b577d923c55b3ec9]: Words in s. 26(2)(a) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 34(3)(a)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/34/3/a) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-24f952f7070198136c58ea4ed6a49950]: S. 205(2)(za) inserted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 85(5)(a)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/85/5/a) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-25d3635823d956cf15b550afd13d4e98]: Words in s. 206 Table inserted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 86(3)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/86/3) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-26ded41f68d1f732b3865cc93e8d88fd]: Sch. 2 para. 19 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-26e53c4365c637973f201bac1a9d893e]: Words in s. 26(2)(g)(ii) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 34(3)(e)(i)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/34/3/e/i) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-278bdb819fea7c369510f10a29ffbc41]: Sch. 1 para. 24 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

@@ -17498,6 +17504,8 @@

[^key-3a9c148245671edfca7949b3fa2966cd]: Words in Sch. 2 para. 4(2) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 92(8)(b)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/92/8/b) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-3c2c46a40b01364a2f55ced34f0da62b]: Sch. 2 para. 17 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-3c2ca8b8a39fe6a1c43d2d0d0aa52508]: Words in s. 17(6) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 22(4)(b)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/22/4/b) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-3c4a6e119bfcb1724fbbe043ea85c3d1]: Words in Sch. 13 para. 1(1)(g) omitted (31.12.2020) by virtue of [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 97(2)(c)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/97/2/c) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

@@ -17688,6 +17696,8 @@

[^key-65db54d1863afa51736d7484ad25641f]: Words in s. 10(1) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 13(2)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/13/2) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-6632992e282cfa917647cec7d63cfe07]: Sch. 3 para. 8(1)(c)(i)(ia) substituted for [Sch. 3](https://www.legislation.gov.uk/ukpga/2018/12/schedule/3) [para. 8(1)(c)(i)](https://www.legislation.gov.uk/ukpga/2018/12/schedule/3/paragraph/8/1/c/i) (30.11.2022) by [The Health and Social Care Act (Northern Ireland) 2022 (Consequential Amendments) Order 2022 (S.I. 2022/1174)](https://www.legislation.gov.uk/uksi/2022/1174), [arts. 1(2)](https://www.legislation.gov.uk/uksi/2022/1174/article/1/2), [12(3)(b)](https://www.legislation.gov.uk/uksi/2022/1174/article/12/3/b)

[^key-664f0d0fd099ec05107c1fc9f6ba7bbc]: Words in s. 15(3) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 19(9)(c)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/19/9/c) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-66d76dad44f0d13ffd99864f3de43a18]: Sch. 18 para. 4(8) inserted (17.12.2021) by [The Age of Criminal Responsibility (Scotland) Act 2019 (Consequential Provisions and Modifications) Order 2021 (S.I. 2021/1458)](https://www.legislation.gov.uk/uksi/2021/1458), [arts. 1(1)](https://www.legislation.gov.uk/uksi/2021/1458/article/1/1), [8(b)](https://www.legislation.gov.uk/uksi/2021/1458/article/8/b)

@@ -17698,6 +17708,8 @@

[^key-676fe1a8b2a4417d85acd7eaa0cb4560]: Words in s. 205(1) omitted (31.12.2020) by virtue of [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 85(3)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/85/3) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-67f8177fb9af4ad26bb4c77960155a96]: Sch. 2 para. 21 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-68c26f2b2ec74cc15e867e9b451f50ae]: Words in s. 25(1) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 33(2)(b)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/33/2/b) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-68ecc63089a9afe9300dcfcff0d33f46]: Words in s. 14(3)(c) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 17(3)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/17/3) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

@@ -17774,6 +17786,8 @@

[^key-79e7068c8e4cd6fd22e23d24f813e766]: Words in [s. 6(1)](https://www.legislation.gov.uk/ukpga/2018/12/section/6/1) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 9](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/9) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-7a8fc913f5df2ae9c65b684b305d36db]: Sch. 2 para. 22 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-7aac6a775a9db704483930b3b42f67b9]: Words in Sch. 2 para. 26(9)(c) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 92(21)(b)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/92/21/b) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-7acebc72466e110599be1c7c05f2d8a7]: Words in s. 5(7) omitted (31.12.2020) by virtue of [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 6(6)(a)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/6/6/a) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

@@ -17782,6 +17796,8 @@

[^key-7bf8d12b13a9cff5b5baf9f27218e5d6]: Words in s. 188(2) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 82](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/82) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-7ccfab7aba2fe39c0b4ff439f2977e25]: Sch. 2 para. 24 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-7ce231d6f630571ef964323847674614]: Words in s. 15(4) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 19(10)(b)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/19/10/b) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-7d0051e33f3cb632344762d050370d86]: Sch. 2 para. 4(4) omitted (31.1.2022) by virtue of [The Data Protection Act 2018 (Amendment of Schedule 2 Exemptions) Regulations 2022 (S.I. 2022/76)](https://www.legislation.gov.uk/uksi/2022/76), [regs. 1(2)](https://www.legislation.gov.uk/uksi/2022/76/regulation/1/2), [2(2)(d)](https://www.legislation.gov.uk/uksi/2022/76/regulation/2/2/d)

@@ -17916,6 +17932,8 @@

[^key-9b74281b86c8372c9d8ee52a902b679f]: S. 205(1A) inserted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 85(4)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/85/4) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)) (as amended by [S.I. 2020/1586](https://www.legislation.gov.uk/uksi/2020/1586), [regs. 1(2)](https://www.legislation.gov.uk/uksi/2020/1586/regulation/1/2), [5(2)](https://www.legislation.gov.uk/uksi/2020/1586/regulation/5/2)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-9c101e97812e71a335520eb1c47a6ec6]: Sch. 2 para. 23 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-9cd6eafc08f53ed26f3cab27f3bd17ed]: Words in s. 17(8) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 22(6)(b)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/22/6/b) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-9ce1c997de01c079f4e45fdcfb0339c3]: Words in s. 151(1)(b) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 62](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/62) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

@@ -17936,6 +17954,8 @@

[^key-a1273524e053f511fd09ea5026a748c7]: Words in Sch. 3 para. 2(2) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 93(5)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/93/5) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-a16e898716b82093a021e0d331d6725e]: [Sch. 7 para. 18A](https://www.legislation.gov.uk/ukpga/2018/12/schedule/7/paragraph/18A) inserted (1.11.2022 for specified purposes) by [Armed Forces Act 2021 (c. 35)](https://www.legislation.gov.uk/ukpga/2021/35), [s. 24(1)](https://www.legislation.gov.uk/ukpga/2021/35/section/24/1), [Sch. 4 para. 9](https://www.legislation.gov.uk/ukpga/2021/35/schedule/4/paragraph/9); [S.I. 2022/1095](https://www.legislation.gov.uk/uksi/2022/1095), [reg. 3](https://www.legislation.gov.uk/uksi/2022/1095/regulation/3)

[^key-a1c35c4d9fb9c6b8432b9c99b83faa06]: S. 104 in force at 16.9.2019 by [S.I. 2019/1188](https://www.legislation.gov.uk/uksi/2019/1188), [reg. 2(d)](https://www.legislation.gov.uk/uksi/2019/1188/regulation/2/d)

[^key-a2c39c1b8f50d64d3eab992537ab337c]: Words in s. 5(3) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 6(4)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/6/4) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

@@ -17970,6 +17990,8 @@

[^key-ab5b474d3b7afb2f028fbe0f93ce632c]: Words in s. 15(2)(c) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 19(5)(a)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/19/5/a) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-ae0d40b78ec0ef6eff74768f4ff98744]: [S. 204(4)(p)](https://www.legislation.gov.uk/ukpga/2018/12/section/204/4/p) omitted (30.11.2022) by virtue of [The Health and Social Care Act (Northern Ireland) 2022 (Consequential Amendments) Order 2022 (S.I. 2022/1174)](https://www.legislation.gov.uk/uksi/2022/1174), [arts. 1(2)](https://www.legislation.gov.uk/uksi/2022/1174/article/1/2), [12(2)](https://www.legislation.gov.uk/uksi/2022/1174/article/12/2)

[^key-b01ad887f3d56c8021072a3f068fbcb6]: Sch. 1 para. 11 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-b02d838bd40974bc580161dcc52bd83c]: Words in Sch. 2 para. 4(1) inserted (31.1.2022) by [The Data Protection Act 2018 (Amendment of Schedule 2 Exemptions) Regulations 2022 (S.I. 2022/76)](https://www.legislation.gov.uk/uksi/2022/76), [regs. 1(2)](https://www.legislation.gov.uk/uksi/2022/76/regulation/1/2), [2(2)(a)](https://www.legislation.gov.uk/uksi/2022/76/regulation/2/2/a)

@@ -17990,6 +18012,8 @@

[^key-b43bb1f6638b5994d92beeecf2ab27a2]: S. 207 modified (30.9.2020) by [The Channel Tunnel (Arrangements with the Kingdom of the Netherlands) Order 2020 (S.I. 2020/916)](https://www.legislation.gov.uk/uksi/2020/916), [arts. 1(2)(b)](https://www.legislation.gov.uk/uksi/2020/916/article/1/2/b), [4(3)](https://www.legislation.gov.uk/uksi/2020/916/article/4/3)[(4)](https://www.legislation.gov.uk/uksi/2020/916/article/4/4)

[^key-b452ea5807870d8b5ed178682e71a1c9]: Sch. 3 para. 9 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-b46d629f05ec35dd3166d376f05d7e6a]: Words in Sch. 13 para. 3 omitted (31.12.2020) by virtue of [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 97(3)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/97/3) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-b499f11052d143d8bd9082382676ba08]: Words in Sch. 2 para. 26(9)(b) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 92(21)(b)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/92/21/b) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

@@ -18070,6 +18094,8 @@

[^key-cb40895550fff4b1df945a592f3d2928]: S. 26(2)(g)(iv) inserted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 34(3)(e)(ii)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/34/3/e/ii) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-cb488232f6394d8ef31bca7d0e16a533]: Sch. 3 para. 4 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-cba88e2b39b826968769027cc29370be]: Words in [s. 135(4)](https://www.legislation.gov.uk/ukpga/2018/12/section/135/4) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 56](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/56) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-cc8fef6eab17a4ac6bac35664627a6a3]: Words in s. 28(1) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 36(3)(b)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/36/3/b) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

@@ -18090,6 +18116,8 @@

[^key-d114d373a470ef9c52798d2916ae07af]: Words in Sch. 2 para. 1 cross-heading substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 92(4)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/92/4) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-d142e8d668e46fcefe4fda5df5ec3327]: Sch. 3 para. 3 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-d16c7a54102fa53493454b8eb8c8f1f3]: S. 23 omitted (31.12.2020) by virtue of [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 31](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/31) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-d171d83535850d556ca50d4c0a9131d1]: Words in [Sch. 19 para. 432(5)(a)](https://www.legislation.gov.uk/ukpga/2018/12/schedule/19/paragraph/432/5/a) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 100(3)](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/100/3) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

@@ -18098,6 +18126,8 @@

[^key-d215058b7b57e3a9731a7ad5e4301724]: Words in s. 11(1) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 14](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/14) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-d2992e1a702c7fd6a6c636a5bb840e57]: Sch. 3 para. 10 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^key-d2b3c86cc8ebfa8022b13d7f3cb9ebdf]: S. 74 omitted (31.12.2020) by virtue of [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 41](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/41) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

[^key-d2b9ba5521020831be5beef0f2b1990f]: Words in s. 173(2)(b) substituted (31.12.2020) by [The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419)](https://www.legislation.gov.uk/uksi/2019/419), [reg. 1(2)](https://www.legislation.gov.uk/uksi/2019/419/regulation/1/2), [Sch. 2 para. 73](https://www.legislation.gov.uk/uksi/2019/419/schedule/2/paragraph/73) (with [reg. 5](https://www.legislation.gov.uk/uksi/2019/419/regulation/5)); [2020 c. 1](https://www.legislation.gov.uk/ukpga/2020/1), [Sch. 5 para. 1(1)](https://www.legislation.gov.uk/ukpga/2020/1/schedule/5/paragraph/1/1)

@@ -18316,6 +18346,8 @@

[^M_I_1574309e-0fb7-417d-d1d4-23e96c23545f]: S. 64 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_1576d3fb-ced4-4d34-ec38-bcec573f1813]: Sch. 2 para. 26 in force at 25.5.2018 in so far as not already in force by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_16855a45-e444-4356-a88e-7307bc6bca55]: S. 4 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_168df6f9-364c-4184-a194-3e9281c03b18]: S. 130 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(e)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/e)

@@ -18350,6 +18382,8 @@

[^M_I_34b2fbf2-1e4a-4d07-d099-1a38465186af]: S. 174 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(f)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/f)

[^M_I_34e0f2d9-f333-43c2-9bd6-92eeb4ab691c]: Sch. 2 para. 25 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_372475c2-f786-4737-b481-aead1aa9c3ab]: S. 169 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(f)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/f)

[^M_I_391b74dc-ff38-40f0-dbeb-d4d0a0c497ae]: S. 15 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

@@ -18360,6 +18394,10 @@

[^M_I_3a6f1a21-3448-4b2a-be96-a9e9e60fd5b0]: S. 44 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_3c42d1bb-45b0-432b-c134-e3b599ff9254]: Sch. 3 para. 6 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_3e451190-f0c7-43b2-d2d7-28b88e307c39]: Sch. 3 para. 2 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_3ed2e15f-1eb7-4d90-e4d8-d26085739fbe]: S. 32 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_3f2dff73-cf74-4ec2-b84f-44e3562c005e]: S. 150 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(f)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/f)

@@ -18380,6 +18418,8 @@

[^M_I_4cb33b48-fb05-441c-ad41-ab84ff1cc8de]: S. 45 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_4f1080c2-21a7-4c82-a89d-e7adfbd426fc]: Sch. 3 para. 11 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_4f213d8e-57db-413c-ccda-49423c6a9fdf]: S. 72 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_536accb5-c56e-4c05-9321-92e7d2337856]: S. 131 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(e)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/e)

@@ -18388,6 +18428,8 @@

[^M_I_5ac0b663-bead-426f-d919-937d2ed7365c]: S. 75 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_5ac45927-8647-4884-f5fd-427e5e0afe77]: Sch. 3 para. 5 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_5c6b5d6b-2c80-40cd-ea63-6e6a627488b9]: S. 49 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_5cff7ca7-5185-44a0-80a7-3edfa76b406e]: S. 13 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

@@ -18406,6 +18448,8 @@

[^M_I_62c67ce5-a2dd-494a-9ee1-9f07c9499112]: S. 122 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(e)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/e)

[^M_I_6537d08e-b9ed-4eef-e7da-07245fa6f534]: Sch. 2 para. 12 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_65d310f2-daa6-4635-ef8b-9b4d9f30fef9]: S. 62 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_6e331738-092a-40d0-93dd-2a952272df54]: S. 57 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

@@ -18504,20 +18548,32 @@

[^M_I_bbfafeaf-251f-4c63-a3fa-3a94ee9d5627]: S. 77 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_bc96b136-0fac-464a-9d2c-66928756f962]: Sch. 2 para. 16 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_bd2610c7-1c20-44bd-bd54-f7cec50cefdf]: Sch. 2 para. 20 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_bf3711a7-f203-49fa-ba50-dc4a9245ae9a]: S. 60 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_c1f33cf3-e662-4b89-ea75-a314be526ffa]: S. 48 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_c29ec2b5-23fc-42eb-ccc5-bd4e7c07653e]: S. 100 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(d)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/d)

[^M_I_c37eeacc-733b-4fd9-b03b-d8d029a82ea7]: Sch. 3 para. 1 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_c3ecc2f3-1e54-4634-b1c6-9e30f80388ab]: Sch. 2 para. 10 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_c5924cf3-6bec-4577-ae67-0fd578ee36d6]: S. 67 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_c853ced2-b522-4a39-9482-405217ecdbe7]: Sch. 2 para. 18 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_c930fb6e-cfcd-4863-db90-daafa37940ab]: S. 98 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(d)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/d)

[^M_I_c9efecfa-212d-48fe-915c-89c2c23bc21e]: Sch. 3 para. 8 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_cd6fe374-e332-4c0e-875f-aa4dc41075f6]: S. 68 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_d0d73c42-8e30-469d-f331-baaea535f1cb]: Sch. 3 para. 7 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_d12995b4-0d48-4403-a1e6-4860af1c5761]: S. 30 in force in so far as not already in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_d2cfddfb-2465-4e45-adcb-81429283652b]: S. 168 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(f)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/f)

@@ -18526,6 +18582,8 @@

[^M_I_d69dd7f5-3ead-4b03-f72c-ff3b578ecd5b]: S. 55 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_d7cf0043-ae6a-4697-de33-cdf539128035]: Sch. 2 para. 13 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_da01c4c2-f825-40ab-f69c-0d6e773451b9]: S. 2 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(a)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/a)

[^M_I_da07269f-db52-4980-a0c1-b39b712f7b3a]: S. 107 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(d)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/d)

@@ -18546,6 +18604,8 @@

[^M_I_ec14ece8-405d-48be-ee77-ba444090e5ce]: Sch. 2 para. 4 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_efe9e3d5-b2a4-42b5-9cde-33f394f571dc]: Sch. 3 para. 12 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_f1846588-44ae-4fac-d1f9-edbe1422eb8a]: S. 47 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_f7576ea7-8886-4705-ec43-bade7812bb41]: S. 140 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(e)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/e)

@@ -18560,32 +18620,6 @@

[^M_I_ffacd87e-5a20-492e-de3c-99476f317c17]: S. 80 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(c)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/c)

[^M_I_6927ea01-1dd8-471d-d354-6d65ef9e17ea]: Sch. 20 para. 50 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(g)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/g)

[^M_I_d74e4721-9593-445e-c9b1-9870df442f1f]: Sch. 20 para. 18 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(g)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/g)

@@ -19912,31 +19946,7 @@

[^key-1be9e273ac0b64d03506cf32210c1a57]: Sch. 3 para. 18 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

[^M_I_7d7f6f46-d194-46d0-dcc5-3255f6db7caf]: Sch. 3 para. 8 in force at 25.5.2018 by [S.I. 2018/625](https://www.legislation.gov.uk/uksi/2018/625), [reg. 2(1)(b)](https://www.legislation.gov.uk/uksi/2018/625/regulation/2/1/b)

#### Special categories of personal data etc: supplementary

#### Limits on fees that may be charged by controllers

##### 17A

@@ -20008,7 +20018,7 @@

- (3) Regulations under this section are subject to the negative resolution procedure.

#### Manual unstructured data used in longstanding historical research

#### National security and defence exemption

##### 74A

@@ -20138,7 +20148,7 @@

## Part 1 — Interpretation

#### The applied GPDR

#### Merger of the directly applicable GDPR and the applied GDPR

##### 1

@@ -20515,3 +20525,7 @@

##### 15A

The Provost Marshal for serious crime.

##### 18A

The Service Police Complaints Commissioner.

2022-07-30

Data Protection Act 2018

View changes Text at this date

2022-03-18

Data Protection Act 2018

View changes Text at this date

2022-01-31

Data Protection Act 2018

View changes Text at this date

2021-12-17

Data Protection Act 2018

View changes Text at this date

2021-12-15

Data Protection Act 2018

View changes Text at this date

2021-01-28

Data Protection Act 2018

View changes Text at this date

2020-12-31

Data Protection Act 2018

View changes Text at this date

2020-09-30

Data Protection Act 2018

View changes Text at this date

2020-02-14

Data Protection Act 2018

View changes Text at this date

2019-12-02

Data Protection Act 2018

View changes Text at this date

2019-09-16

Data Protection Act 2018

View changes Text at this date

2019-07-21

Data Protection Act 2018

View changes Text at this date

2019-05-23

Data Protection Act 2018

View changes Text at this date

2019-03-29

Data Protection Act 2018

View changes Text at this date

2018-07-23

Data Protection Act 2018

View changes Text at this date

2018-05-25

Data Protection Act 2018

View changes Text at this date

2018-05-23

Data Protection Act 2018

original version Text at this date