The Data Protection Act 2018 (Commencement No. 2) Regulations 2019

Made: 5th August 2019

The Secretary of State makes the following Regulation in exercise of the powers conferred by section 212(1) of the Data Protection Act 2018[^f00001].

Citation

1

These Regulations may be cited as the Data Protection Act 2018 (Commencement No. 2) Regulations 2019.

Provisions coming into force on 16th September 2019

2

The following provisions of Part 4 of the Data Protection Act 2018 (intelligence services processing), so far as not already in force, come into force on 16th September 2019—

• (a) section 93 (right to information);

• (b) section 102 (general obligations of the controller);

• (c) section 103 (data protection by design);

• (d) section 104 (joint controllers);

• (e) section 105 (processors);

• (f) section 108 (communication of a personal data breach).

Signed

Brandon Lewis — Minister of State — Home Office — 5th August 2019

Explanatory note

(This note is not part of the Regulations)

EXPLANATORY NOTE

These Regulations bring into force the remaining provisions of Part 4 of the Data Protection Act 2018 (c. 12) (“the 2018 Act”), which relates to data processing by the Intelligence Services, so far as they were not already in force.

Part 4 of the 2018 Act was brought into force on 25th May 2018 by the Data Protection Act 2018 (Commencement No. 1 and Transitional and Saving provisions) Regulations 2018 (S.I. 2018/625), with the exception of the sections specified in regulation 2 of these Regulations.

Section 212(2)(f) of the 2018 Act brought into force on 23rd May 2018 any provision of the 2018 Act so far as it conferred powers to make regulations or Tribunal Procedure Rules or it was otherwise necessary to enable the exercise of such a power.

Footnotes

[^f00001]: 2018 c. 12.