Reform history

Data Protection Act 2018

32 versions · 2018-05-23
2026-04-07
Data Protection Act 2018
2026-03-31
Data Protection Act 2018

Changes on 2026-03-31

@@ -20802,6 +20802,10 @@
[^key-fd7d8643e5cf863864df9476b9a7e1d8]: [Act](https://www.legislation.gov.uk/ukpga/2018/12) modified (10.3.2026) by [The Surrey (Structural Changes) Order 2026 (S.I. 2026/264)](https://www.legislation.gov.uk/uksi/2026/264), [arts. 1(1)](https://www.legislation.gov.uk/uksi/2026/264/article/1/1), [28(2)(e)](https://www.legislation.gov.uk/uksi/2026/264/article/28/2/e), [40(2)(e)](https://www.legislation.gov.uk/uksi/2026/264/article/40/2/e)
[^key-8f2b2401a00979810a31b65e3185a134]: [S. 13A](https://www.legislation.gov.uk/ukpga/2018/12/section/13A) inserted (E.W.) (31.3.2026) by [Victims and Prisoners Act 2024 (c. 21)](https://www.legislation.gov.uk/ukpga/2024/21), [ss. 31(4)](https://www.legislation.gov.uk/ukpga/2024/21/section/31/4), [81(2)](https://www.legislation.gov.uk/ukpga/2024/21/section/81/2) (with [s. 32](https://www.legislation.gov.uk/ukpga/2024/21/section/32)); [S.I. 2026/317](https://www.legislation.gov.uk/uksi/2026/317), [reg. 2](https://www.legislation.gov.uk/uksi/2026/317/regulation/2)
[^key-0e53649fe7127715ffc24ffc24bc0ea5]: [S. 13A](https://www.legislation.gov.uk/ukpga/2018/12/section/13A) extended (S. and N.I.) (31.3.2026) by [Data (Use and Access) Act 2025 (c. 18)](https://www.legislation.gov.uk/ukpga/2025/18), [s. 142(1)](https://www.legislation.gov.uk/ukpga/2025/18/section/142/1), [Sch. 11 para. 32(b)](https://www.legislation.gov.uk/ukpga/2025/18/schedule/11/paragraph/32/b); [S.I. 2026/317](https://www.legislation.gov.uk/uksi/2026/317), [reg. 3](https://www.legislation.gov.uk/uksi/2026/317/regulation/3)
#### Limits on fees that may be charged by controllers
##### 17A
@@ -21318,7 +21322,7 @@
- (5) In this section, “*pre-commencement enactment*” means an enactment so far as passed or made before 20th August 2025, other than an enactment contained in, or made under, a provision listed in section 186(2) or (3).
#### Protection of personal data
#### Overview
### Relevant international law
@@ -21342,9 +21346,9 @@
- (6) In this section, “*treaty*” and “*ratified*” have the same meaning as in Part 2 of the Constitutional Reform and Governance Act 2010 (see section 25 of that Act).
#### Limits on fees that may be charged by controllers
#### National security and defence exemption
#### Special categories of personal data etc: supplementary
#### Manual unstructured data used in longstanding historical research
##### 42A
@@ -21700,7 +21704,7 @@
## Schedule 12A
#### Number of members
#### Status
##### 1
@@ -22102,7 +22106,7 @@
- (b) references to the payment of pensions, allowances or gratuities to or in respect of a person include references to the making of payments towards the provision of pensions, allowances or gratuities to be paid to or in respect of a person.
#### Merger of the directly applicable GDPR and the applied GDPR
#### The applied GPDR
#### GDPR: right to an effective remedy against the Commissioner
@@ -22751,3 +22755,9 @@
- (3) During a relevant period, section 148B has effect as if for subsection (8) there were substituted—
> (8) The Commissioner may not give an individual an interview notice with respect to the processing of personal data for the special purposes unless a determination under section 174 with respect to the data or the processing has taken effect.
##### 13A
- (1) The Secretary of State may by regulations amend the table in Article 17(5) of the UK GDPR.
- (2) Regulations under this section are subject to the affirmative resolution procedure.
2026-03-10
Data Protection Act 2018
2026-01-29
Data Protection Act 2018
2025-08-19
Data Protection Act 2018
2025-06-19
Data Protection Act 2018
2025-04-01
Data Protection Act 2018
2024-12-13
Data Protection Act 2018
2024-03-08
Data Protection Act 2018
2024-01-01
Data Protection Act 2018
2023-12-31
Data Protection Act 2018
2023-12-26
Data Protection Act 2018
2023-05-05
Data Protection Act 2018
2023-02-01
Data Protection Act 2018
2022-11-30
Data Protection Act 2018
2022-07-30
Data Protection Act 2018
2022-03-18
Data Protection Act 2018
2022-01-31
Data Protection Act 2018
2021-12-17
Data Protection Act 2018
2021-12-15
Data Protection Act 2018
2021-01-28
Data Protection Act 2018
2020-12-31
Data Protection Act 2018
2020-09-30
Data Protection Act 2018
2020-02-14
Data Protection Act 2018
2019-12-02
Data Protection Act 2018
2019-09-16
Data Protection Act 2018
2019-07-21
Data Protection Act 2018
2019-05-23
Data Protection Act 2018
2019-03-29
Data Protection Act 2018
2018-07-23
Data Protection Act 2018
2018-05-25
Data Protection Act 2018
2018-05-23
Data Protection Act 2018
original version Text at this date