F1Part I Preliminary
F11 Basic interpretative provisions.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F12 Sensitive personal data.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F13 The special purposes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F14 The data protection principles.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F15 Application of Act.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F16 The Commissioner . . . .
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1Part II Rights of data subjects and others
F17 Right of access to personal data.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F18 Provisions supplementary to section 7.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F19 Application of section 7 where data controller is credit reference agency.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F19A Unstructured personal data held by public authorities.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F110 Right to prevent processing likely to cause damage or distress.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F111 Right to prevent processing for purposes of direct marketing.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F112 Rights in relation to automated decision-taking.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F112A Rights of data subjects in relation to exempt manual data.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F113 Compensation for failure to comply with certain requirements.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F114 Rectification, blocking, erasure and destruction.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F115 Jurisdiction and procedure.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1Part III Notification by data controllers
F116 Preliminary.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F117 Prohibition on processing without registration.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F118 Notification by data controllers.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F119 Register of notifications.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F120 Duty to notify changes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F121 Offences.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F122 Preliminary assessment by Commissioner.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F123 Power to make provision for appointment of data protection supervisors.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F124 Duty of certain data controllers to make certain information available.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F125 Functions of Commissioner in relation to making of notification regulations.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F126 Fees regulations.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1Part IV Exemptions
F127 Preliminary.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F128 National security.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F129 Crime and taxation.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F130 Health, education and social work.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F131 Regulatory activity.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F132 Journalism, literature and art.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F133 Research, history and statistics.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F133A Manual data held by public authorities.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F134 Information available to the public by or under enactment.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F135 Disclosures required by law or made in connection with legal proceedings etc.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F135A Parliamentary privilege.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F136 Domestic purposes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F137 Miscellaneous exemptions.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F138 Powers to make further exemptions by order.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F139 Transitional relief.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Part V Enforcement
F140 Enforcement notices.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F141 Cancellation of enforcement notice.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F141AAssessment notices
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F141BAssessment notices: limitations
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F141CCode of practice about assessment notices
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F142 Request for assessment.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F143 Information notices.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F144 Special information notices.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F145 Determination by Commissioner as to the special purposes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F146 Restriction on enforcement in case of processing for the special purposes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F147 Failure to comply with notice.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F148 Rights of appeal.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F149 Determination of appeals.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F150 Powers of entry and inspection.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
C1Part VI Miscellaneous and General
Pt. VI applied (with modifications) (3.12.2014) by The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141), regs. 1(b), 51(1)(b)
F1 Functions of Commissioner
F151 General duties of Commissioner.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152 Reports and codes of practice to be laid before Parliament.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152AData-sharing code
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152AADirect marketing code
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152B data-sharing and direct marketing codes: procedure
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152CAlteration or replacement of data-sharing and direct marketing codes
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152DPublication of data-sharing and direct marketing codes
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152EEffect of data-sharing and direct marketing codes
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F153 Assistance by Commissioner in cases involving processing for the special purposes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F154 International co-operation.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F154AInspection of overseas information systems
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Unlawful obtaining et ceteralaetc. of personal data
F155 Unlawful obtaining etc. of personal data.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1Monetary penalties
F155APower of Commissioner to impose monetary penalty
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F155BMonetary penalty notices: procedural rights
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F155CGuidance about monetary penalty notices
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F155DMonetary penalty notices: enforcement
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F155ENotices under sections 55A and 55B: supplemental
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Records obtained under data subject’s right of access
F156 Prohibition of requirement as to production of certain records.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F157 Avoidance of certain contractual terms relating to health records.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Information provided to Commissioner or Tribunal
F158 Disclosure of information.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F159 Confidentiality of information.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 General provisions relating to offences
F160 Prosecutions and penalties.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F161 Liability of directors etc.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Amendments of Consumer Credit Act 1974
62 Amendments of Consumer Credit Act 1974.
1
In section 158 of the M1Consumer Credit Act 1974 (duty of agency to disclose filed information)—
a
in subsection (1)—
i
in paragraph (a) for “individual” there is substituted “
partnership or other unincorporated body of persons not consisting entirely of bodies corporate
”
, and
ii
for “him” there is substituted “
it
”
,
b
in subsection (2), for “his” there is substituted “
the consumer’s
”
, and
c
in subsection (3), for “him” there is substituted “
the consumer
”
.
2
In section 159 of that Act (correction of wrong information) for subsection (1) there is substituted—
1
Any individual (the “objector”) given—
a
information under section 7 of the Data Protection Act 1998 by a credit reference agency, or
b
information under section 158,
who considers that an entry in his file is incorrect, and that if it is not corrected he is likely to be prejudiced, may give notice to the agency requiring it either to remove the entry from the file or amend it.
3
In subsections (2) to (6) of that section—
a
for “consumer”, wherever occurring, there is substituted “
objector
”
, and
b
for “Director”, wherever occurring, there is substituted “
the relevant authority
”
.
4
After subsection (6) of that section there is inserted—
7
The Data Protection Commissioner may vary or revoke any order made by him under this section.
8
In this section “the relevant authority” means—
a
where the objector is a partnership or other unincorporated body of persons, the Director, and
b
in any other case, the Data Protection Commissioner.
5
In section 160 of that Act (alternative procedure for business consumers)—
a
in subsection (4)—
i
for “him” there is substituted “
to the consumer
”
, and
ii
in paragraphs (a) and (b) for “he” there is substituted “
the consumer
”
and for “his” there is substituted “
the consumer’s
”
, and
b
after subsection (6) there is inserted—
7
In this section “consumer” has the same meaning as in section 158.
F1 General
F163 Application to Crown.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F163A Application to Parliament.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F164 Transmission of notices etc. by electronic or other means.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F165 Service of notices by Commissioner.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F166 Exercise of rights in Scotland by children.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F167 Orders, regulations and rules.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F168 Meaning of “accessible record”.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F169 Meaning of “health professional”.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F170 Supplementary definitions.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F171 Index of defined expressions.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F172 Modifications of Act.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F173 Transitional provisions and savings.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F174 Minor and consequential amendments and repeals and revocations.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F175 Short title, commencement and extent.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Act repealed (except s. 62, Sch. 15 paras. 13, 15, 16, 18, 19) (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 44 (with ss. 117, 209, 210, Sch. 20 paras. 2-9, 17-25, 27-46, 53, 54, 58); S.I. 2018/625, reg. 2(1)(g)