F1Data Protection Act 1998
1998 c. 29An Act to make new provision for the regulation of the processing of information relating to individuals, including the obtaining, holding, use or disclosure of such information.C2C3
Enacted[16th July 1998]
Be it enacted by the Queen’s most Excellent Majesty, by and with the advice and consent of the Lords Spiritual and Temporal, and Commons, in this present Parliament
assembled, and by the authority of the same, as follows:—C4
F1Part I Preliminary¶
F11 Basic interpretative provisions.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F12 Sensitive personal data.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F13 The special purposes.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F14 The data protection principles.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F15 Application of Act.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F16 The Commissioner . . . .¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1Part II Rights of data subjects and others¶
F17 Right of access to personal data.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F18 Provisions supplementary to section 7.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F19 Application of section 7 where data controller is credit reference agency.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F19A Unstructured personal data held by public authorities.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F110 Right to prevent processing likely to cause damage or distress.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F111 Right to prevent processing for purposes of direct marketing.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F112 Rights in relation to automated decision-taking.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F112A Rights of data subjects in relation to exempt manual data.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F113 Compensation for failure to comply with certain requirements.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F114 Rectification, blocking, erasure and destruction.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F115 Jurisdiction and procedure.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1Part III Notification by data controllers¶
F116 Preliminary.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F117 Prohibition on processing without registration.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F118 Notification by data controllers.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F119 Register of notifications.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F120 Duty to notify changes.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F121 Offences.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F122 Preliminary assessment by Commissioner.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F123 Power to make provision for appointment of data protection supervisors.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F124 Duty of certain data controllers to make certain information available.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F125 Functions of Commissioner in relation to making of notification regulations.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F126 Fees regulations.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1Part IV Exemptions¶
F127 Preliminary.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F128 National security.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F129 Crime and taxation.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F130 Health, education and social work.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F131 Regulatory activity.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F132 Journalism, literature and art.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F133 Research, history and statistics.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F133A Manual data held by public authorities.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F134 Information available to the public by or under enactment.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F135 Disclosures required by law or made in connection with legal proceedings etc.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F135A Parliamentary privilege.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F136 Domestic purposes.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F137 Miscellaneous exemptions.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F138 Powers to make further exemptions by order.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F139 Transitional relief.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1 Part V Enforcement¶
F140 Enforcement notices.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F141 Cancellation of enforcement notice.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F141A Assessment notices¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F141B Assessment notices: limitations¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F141C Code of practice about assessment notices¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F142 Request for assessment.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F143 Information notices.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F144 Special information notices.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F145 Determination by Commissioner as to the special purposes.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F146 Restriction on enforcement in case of processing for the special purposes.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F147 Failure to comply with notice.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F148 Rights of appeal.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F149 Determination of appeals.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F150 Powers of entry and inspection.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .C1Part VI Miscellaneous and General¶
F1 Functions of Commissioner¶
F151 General duties of Commissioner.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F152 Reports and codes of practice to be laid before Parliament.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F152A Data-sharing code¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F152AA Direct marketing code¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F152B data-sharing and direct marketing codes: procedure¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F152C Alteration or replacement of data-sharing and direct marketing codes ¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F152D Publication of data-sharing and direct marketing codes ¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F152E Effect of data-sharing and direct marketing codes ¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F153 Assistance by Commissioner in cases involving processing for the special purposes.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F154 International co-operation.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F154A Inspection of overseas information systems¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1 Unlawful obtaining et ceteralaetc. of personal data¶
F155 Unlawful obtaining etc. of personal data.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1Monetary penalties¶
F155A Power of Commissioner to impose monetary penalty¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F155B Monetary penalty notices: procedural rights¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F155C Guidance about monetary penalty notices¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F155D Monetary penalty notices: enforcement¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F155E Notices under sections 55A and 55B: supplemental¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1 Records obtained under data subject’s right of access¶
F156 Prohibition of requirement as to production of certain records.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F157 Avoidance of certain contractual terms relating to health records.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1 Information provided to Commissioner or Tribunal¶
F158 Disclosure of information.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F159 Confidentiality of information.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1 General provisions relating to offences¶
F160 Prosecutions and penalties.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F161 Liability of directors etc.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .Amendments of Consumer Credit Act 1974¶
62 Amendments of Consumer Credit Act 1974.¶
F1 General¶
F163 Application to Crown.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F163A Application to Parliament.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F164 Transmission of notices etc. by electronic or other means.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F165 Service of notices by Commissioner.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F166 Exercise of rights in Scotland by children.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F167 Orders, regulations and rules.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F168 Meaning of “accessible record”.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F169 Meaning of “health professional”.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F170 Supplementary definitions.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F171 Index of defined expressions.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F172 Modifications of Act.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F173 Transitional provisions and savings.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F174 Minor and consequential amendments and repeals and revocations.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F175 Short title, commencement and extent.¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .SCHEDULES
F1SCHEDULE 1 ¶
The data protection principles
Section 4(1) and (2).
F1Part I The principles¶
F1Part II Interpretation of the principles in Part I¶
F1 The first principle¶
F1 The second principle¶
F1 The fourth principle¶
F1 The sixth principle¶
F1 The seventh principle¶
F1 The eighth principle¶
F1SCHEDULE 2 ¶
Conditions relevant for purposes of the first principle: processing of any personal data
Section 4(3).
F1SCHEDULE 3 ¶
Conditions relevant for purposes of the first principle: processing of sensitive personal data
Section 4(3).
F1SCHEDULE 4 ¶
Cases where the eighth principle does not apply
Section 4(3).
F1SCHEDULE 5 ¶
The Data Protection Commissioner . . .
Section 6(7).
F1Part I The Commissioner¶
F1 Status and capacity¶
F1 Tenure of office and appointment¶
F1 Salary et ceteralaetc.¶
F1 Officers and staff¶
F1 Authentication of seal of the Commissioner¶
F1 Presumption of authenticity of documents issued by the Commissioner¶
F1 Money¶
F1 Accounts¶
F1 Application of Part I in Scotland¶
F1Part II The Tribunal¶
F1 Tenure of office¶
F112 ¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1 Salary et ceteralaetc.¶
F113 ¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1 Officers and staff¶
F114 ¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1 Expenses¶
F115 ¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1 Part III ¶
F116 ¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F117 ¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .F1 SCHEDULE 6 ¶
Appeal proceedings
Sections 28(12), 48(5).
F1 Hearing of appeals¶
F1 Constitution of Tribunal in national security cases¶
F1 Constitution of Tribunal in other cases¶
F1 Determination of questions by full Tribunal¶
F1 Ex parte proceedings¶
F1Tribunal Procedure Rules¶
F1 Obstruction et ceteralaetc.¶
F1SCHEDULE 7 ¶
Miscellaneous exemptions
Section 37.
F1 Confidential references given by the data controller¶
F1 Armed forces¶
F1 Judicial appointments and honours¶
F1 Crown employment and Crown or Ministerial appointments¶
F1 Management forecasts et ceteralaetc.¶
F1 Corporate finance¶
F1 Negotiations¶
F1 Examination marks¶
F1 Examination scripts et ceteralaetc.¶
F1 Legal professional privilege¶
F1 Self-incrimination¶
F1SCHEDULE 8 ¶
Transitional relief
Section 39.
F1Part I Interpretation of Schedule¶
F1Part II Exemptions available before 24th October 2001¶
F1 Manual data¶
F1 Processing otherwise than by reference to the data subject¶
F1 Payrolls and accounts¶
F1 Unincorporated members’ clubs and mailing lists¶
F1 Back-up data¶
F1 Exemption of all eligible automated data from certain requirements¶
F1 Part III Exemptions available after 23rd October 2001 but before 24th October 2007¶
F1Part IV Exemptions after 23rd October 2001 for historical research¶
F1Part V Exemption from section 22¶
F1 SCHEDULE 9 ¶
Powers of entry and inspection
Section 50.
F1 Issue of warrants¶
F1 Execution of warrants¶
F1 Matters exempt from inspection and seizure¶
F1 Return of warrants¶
F1 Offences¶
F1 Vessels, vehicles et ceteralaetc.¶
F1 Scotland and Northern Ireland¶
F1Self-incrimination¶
F1SCHEDULE 10 ¶
Further provisions relating to assistance under section 53
Section 53(6).
F1SCHEDULE 11 ¶
Educational records
Section 68(1)(6).
F1 Meaning of “educational record”¶
F1 England and Wales¶
F1 Scotland¶
F1 Northern Ireland¶
F1 England and Wales: transitory provisions¶
F1SCHEDULE 12 ¶
Accessible public records
Section 68(1)(c).
F1 Meaning of “accessible public record”¶
F1 Housing and social services records: England and Wales¶
F1 Housing and social services records: Scotland¶
F1 Housing and social services records: Northern Ireland¶
F1SCHEDULE 13 ¶
Modifications of Act having effect before 24th October 2007
Section 72.
F1SCHEDULE 14 ¶
Transitional provisions and savings
Section 73.
F1 Interpretation¶
F1 Effect of registration under Part II of 1984 Act¶
F1 Rights of data subjects¶
F1 Enforcement and transfer prohibition notices served under Part V of 1984 Act¶
F1 Notices under new law relating to matters in relation to which 1984 Act had effect¶
F1 Self-incrimination, et ceteralaetc.¶
F1 Warrants issued under 1984 Act¶
F1 Complaints under section 36(2) of 1984 Act and requests for assessment under section 42¶
F1 Applications under Access to Health Records Act 1990 or corresponding Northern Ireland legislation¶
F1 Applications under regulations under Access to Personal Files Act 1987 or corresponding Northern Ireland legislation¶
F1 Applications under section 158 of Consumer Credit Act 1974¶
SCHEDULE 15 ¶
Minor and consequential amendments
Section 74(1).
F1Public Records Act 1958 (c. 51)¶
F1Parliamentary Commissioner Act 1967 (c. 13)¶
F1Superannuation Act 1972 (c. 11)¶
F1House of Commons Disqualification Act 1975 (c. 24)¶
F1Northern Ireland Assembly Disqualification Act 1975 (c. 25)¶
F1Representation of the People Act 1983 (c. 2)¶
F1 Access to Medical Reports Act 1988 (c. 28)¶
F1Football Spectators Act 1989 (c. 37)¶
F1Education (Student Loans) Act 1990 (c. 6)¶
F1Access to Health Records Act 1990 (c. 23)¶
F1Access to Personal Files and Medical Reports (Northern Ireland) Order 1991 (1991/1707 (N.I. 14))¶
Tribunals and Inquiries Act 1992 (c. 53)¶
F1Access to Health Records (Northern Ireland) Order 1993 (1993/1250 (N.I. 4))¶
F1SCHEDULE 16 ¶
Repeals and revocations
Section 74(2).
F1Part I Repeals¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1Part II Revocations¶
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Footnotes
- M11974 c. 39.
- C1Pt. VI applied (with modifications) (3.12.2014) by The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141), regs. 1(b), 51(1)(b)
- C2Act modified (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 432 (with ss. 117, 209, 210, Sch. 20 paras. 58, 59); S.I. 2018/625, reg. 2(1)(g)
- F1Act repealed (except s. 62, Sch. 15 paras. 13, 15, 16, 18, 19) (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 44 (with ss. 117, 209, 210 and with transitional provisions in Sch. 20 paras. 2-9, 17-25, 27-46, 53, 54 and saving in Sch. 20 para. 58); S.I. 2018/625, reg. 2(1)(g)
- C3Act: power to amend conferred (8.5.2008) by virtue of Criminal Justice and Immigration Act 2008 (c. 4), ss. 77(5), 153Act: Crown status for the purposes of the Act extended (6.5.1999) by S.I. 1999/677, art. 7(3)Act applied (1.4.2000) by 1999 c. 28, s. 19(2) (with s. 38); S.I. 2000/1066, art. 2Act excluded (1.3.2000) by S.I. 2000/416, art. 2, Sch.Act: functions of the Secretary of State transferred to the Lord Chancellor (26.11.2001) by S.I. 2001/3500, arts. 3, 4, Sch. 1 para. 11Act applied by S.I. 1993/1813, art. 4(2) (as substituted by S.I. 2001/1544, art. 3(5)(6)) (the amendment coming into force in accordance with art. 1(2) of S.I. 2001/1544)Act (except ss. 6(4)(a)(b), 28, Sch. 5 para. 12(2) for certain purposes and Sch. 6 paras. 2, 3): functions of the Lord Chancellor transferred to the Secretary of State, and all property, rights and liabilities to which the Lord Chancellor is entitled or subject to in connection with any such function transferred to the Secretary of State for Constitutional Affairs (19.8.2003) by The Secretary of State for Constitutional Affairs Order 2003 (S.I. 2003/1887), arts. 4, 5, Sch. 1 (with art. 6)Act restricted by The Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003 (S.I. 2003/2818), art. 8(2) (the amendment coming into force in accordance with art. 1(2) of the amending S.I.)Act modified by The Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003 (S.I. 2003/2818), art. 11(4) (the amendment coming into force in accordance with art. 1(2) of the amending S.I.)Act modified by The National Assembly for Wales Commission (Crown Status) Order 2007 (S.I. 2007/1118), art. 5 (the amendment coming into force in accordance with art. 1(2) of the amending S.I.)Act excluded (3.12.2014) by The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014 (S.I. 2014/3141), regs. 1(b), 50(1)Act applied (N.I.) (12.4.2016) by Health and Social Care (Control of Data Processing) Act (Northern Ireland) 2016 (c. 12), s. 1(8)Act applied (S.) (1.4.2018) by The National Health Service (General Medical Services Contracts) (Scotland) Regulations 2018 (S.S.I. 2018/66), reg. 1, sch. 6 para. 64 (with reg. 2)
- C4Act applied in part (with modifications) in so far as still in force by S.I. 2003/2426, Sch. 1 para. 8AA (as amended) (17.12.2018) by The Privacy and Electronic Communications (Amendment) Regulations 2018 (S.I. 2018/1189), regs. 1, 2(2)(3)