F1 Data Protection Act 1998
1998 CHAPTER 29 cross-notes
An Act to make new provision for the regulation of the processing of information relating to individuals, including the obtaining, holding, use or disclosure of such information.
[16th July 1998]
Be it enacted by the Queen’s most Excellent Majesty, by and with the advice and consent of the Lords Spiritual and Temporal, and Commons, in this present Parliament assembled, and by the authority of the same, as follows:—
F1 Part I Preliminary
F11 Basic interpretative provisions.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F12 Sensitive personal data.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F13 The special purposes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F14 The data protection principles.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F15 Application of Act.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F16 The Commissioner . . . .
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Part II Rights of data subjects and others
F17 Right of access to personal data.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F18 Provisions supplementary to section 7.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F19 Application of section 7 where data controller is credit reference agency.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F19A Unstructured personal data held by public authorities.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F110 Right to prevent processing likely to cause damage or distress.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F111 Right to prevent processing for purposes of direct marketing.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F112 Rights in relation to automated decision-taking.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F112A Rights of data subjects in relation to exempt manual data.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F113 Compensation for failure to comply with certain requirements.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F114 Rectification, blocking, erasure and destruction.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F115 Jurisdiction and procedure.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Part III Notification by data controllers
F116 Preliminary.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F117 Prohibition on processing without registration.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F118 Notification by data controllers.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F119 Register of notifications.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F120 Duty to notify changes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F121 Offences.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F122 Preliminary assessment by Commissioner.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F123 Power to make provision for appointment of data protection supervisors.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F124 Duty of certain data controllers to make certain information available.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F125 Functions of Commissioner in relation to making of notification regulations.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F126 Fees regulations.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Part IV Exemptions
F127 Preliminary.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F128 National security.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F129 Crime and taxation.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F130 Health, education and social work.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F131 Regulatory activity.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F132 Journalism, literature and art.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F133 Research, history and statistics.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F133A Manual data held by public authorities.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F134 Information available to the public by or under enactment.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F135 Disclosures required by law or made in connection with legal proceedings etc.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F135A Parliamentary privilege.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F136 Domestic purposes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F137 Miscellaneous exemptions.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F138 Powers to make further exemptions by order.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F139 Transitional relief.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Part V Enforcement
F140 Enforcement notices.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F141 Cancellation of enforcement notice.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F141A Assessment notices
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F141B Assessment notices: limitations
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F141C Code of practice about assessment notices
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F142 Request for assessment.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F143 Information notices.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F144 Special information notices.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F145 Determination by Commissioner as to the special purposes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F146 Restriction on enforcement in case of processing for the special purposes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F147 Failure to comply with notice.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F148 Rights of appeal.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F149 Determination of appeals.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F150 Powers of entry and inspection.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Part VI Miscellaneous and General cross-notes
F1 Functions of Commissioner
F151 General duties of Commissioner.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152 Reports and codes of practice to be laid before Parliament.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152A Data-sharing code
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152AA Direct marketing code
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152B data-sharing and direct marketing codes: procedure
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152C Alteration or replacement of data-sharing and direct marketing codes
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152D Publication of data-sharing and direct marketing codes
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F152E Effect of data-sharing and direct marketing codes
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F153 Assistance by Commissioner in cases involving processing for the special purposes.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F154 International co-operation.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F154A Inspection of overseas information systems
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Unlawful obtaining et ceteralaetc. of personal data
F155 Unlawful obtaining etc. of personal data.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Monetary penalties
F155A Power of Commissioner to impose monetary penalty
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F155B Monetary penalty notices: procedural rights
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F155C Guidance about monetary penalty notices
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F155D Monetary penalty notices: enforcement
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F155E Notices under sections 55A and 55B: supplemental
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Records obtained under data subject’s right of access
F156 Prohibition of requirement as to production of certain records.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F157 Avoidance of certain contractual terms relating to health records.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Information provided to Commissioner or Tribunal
F158 Disclosure of information.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F159 Confidentiality of information.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 General provisions relating to offences
F160 Prosecutions and penalties.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F161 Liability of directors etc.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Amendments of Consumer Credit Act 1974
62 Amendments of Consumer Credit Act 1974.
(1) M1 In section 158 of the Consumer Credit Act 1974 (duty of agency to disclose filed information)—
(a) in subsection (1)—
(i) in paragraph (a) for “individual” there is substituted “ partnership or other unincorporated body of persons not consisting entirely of bodies corporate ” , and
(ii) for “him” there is substituted “ it ” ,
(b) in subsection (2), for “his” there is substituted “ the consumer’s ” , and
(c) in subsection (3), for “him” there is substituted “ the consumer ” .
(2) In section 159 of that Act (correction of wrong information) for subsection (1) there is substituted—
“ (1) Any individual (the “ objector ”) given—
(a) information under section 7 of the Data Protection Act 1998 by a credit reference agency, or
(b) information under section 158,
who considers that an entry in his file is incorrect, and that if it is not corrected he is likely to be prejudiced, may give notice to the agency requiring it either to remove the entry from the file or amend it. ”
(3) In subsections (2) to (6) of that section—
(a) for “consumer”, wherever occurring, there is substituted “ objector ” , and
(b) for “Director”, wherever occurring, there is substituted “ the relevant authority ” .
(4) After subsection (6) of that section there is inserted—
“ (7) The Data Protection Commissioner may vary or revoke any order made by him under this section.
(8) In this section “ the relevant authority ” means—
(a) where the objector is a partnership or other unincorporated body of persons, the Director, and
(b) in any other case, the Data Protection Commissioner. ”
(5) In section 160 of that Act (alternative procedure for business consumers)—
(a) in subsection (4)—
(i) for “him” there is substituted “ to the consumer ” , and
(ii) in paragraphs (a) and (b) for “he” there is substituted “ the consumer ” and for “his” there is substituted “ the consumer’s ” , and
(b) after subsection (6) there is inserted—
“ (7) In this section “ consumer ” has the same meaning as in section 158. ”
F1 General
F163 Application to Crown.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F163A Application to Parliament.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F164 Transmission of notices etc. by electronic or other means.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F165 Service of notices by Commissioner.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F166 Exercise of rights in Scotland by children.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F167 Orders, regulations and rules.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F168 Meaning of “accessible record”.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F169 Meaning of “health professional”.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F170 Supplementary definitions.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F171 Index of defined expressions.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F172 Modifications of Act.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F173 Transitional provisions and savings.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F174 Minor and consequential amendments and repeals and revocations.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F175 Short title, commencement and extent.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SCHEDULES
Section 4(1) and (2).
F1 SCHEDULE 1 The data protection principles
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 4(3).
F1 SCHEDULE 2 Conditions relevant for purposes of the first principle: processing of any personal data
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 4(3).
F1 SCHEDULE 3 Conditions relevant for purposes of the first principle: processing of sensitive personal data
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 4(3).
F1 SCHEDULE 4 Cases where the eighth principle does not apply
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 6(7).
F1 SCHEDULE 5 The Data Protection Commissioner . . .
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Sections 28(12), 48(5).
F1 SCHEDULE 6 Appeal proceedings
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 37.
F1 SCHEDULE 7 Miscellaneous exemptions
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 39.
F1 SCHEDULE 8 Transitional relief
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 50.
F1 SCHEDULE 9 Powers of entry and inspection
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 53(6).
F1 SCHEDULE 10 Further provisions relating to assistance under section 53
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 68(1)(6).
F1 SCHEDULE 11 Educational records
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 68(1)(c).
F1 SCHEDULE 12 Accessible public records
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 72.
F1 SCHEDULE 13 Modifications of Act having effect before 24th October 2007
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 73.
F1 SCHEDULE 14 Transitional provisions and savings
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Section 74(1).
SCHEDULE 15 Minor and consequential amendments
F1 Public Records Act 1958 (c. 51)
F1 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Parliamentary Commissioner Act 1967 (c. 13)
F1 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Superannuation Act 1972 (c. 11)
F1 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 House of Commons Disqualification Act 1975 (c. 24)
F1 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Northern Ireland Assembly Disqualification Act 1975 (c. 25)
F1 6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Representation of the People Act 1983 (c. 2)
F1 7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Access to Medical Reports Act 1988 (c. 28)
F1 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Football Spectators Act 1989 (c. 37)
F1 9 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Education (Student Loans) Act 1990 (c. 6)
F1 10 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 Access to Health Records Act 1990 (c. 23)
F1 11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F1 12 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
13 In section 5(3) of that Act (cases where right of access may be partially excluded) for the words from the beginning to “record” in the first place where it occurs there is substituted “ Access shall not be given under section 3(2) to any part of a health record ” .
F1 Access to Personal Files and Medical Reports (Northern Ireland) Order 1991 (1991/1707 (N.I. 14))
F1 14 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
15 In Article 6(1) of that Order (interpretation), in the definition of “ health professional ”, for “the Data Protection (Subject Access Modification) (Health) Order 1987” there is substituted “ the Data Protection Act 1998 ” .
Tribunals and Inquiries Act 1992 (c. 53)
16 In Part 1 of Schedule 1 to the Tribunals and Inquiries Act 1992 (tribunals under direct supervision of Council on Tribunals), for paragraph 14 there is substituted—
“ Data protection | 14. (a) The Data Protection Commissioner appointed under section 6 of the Data Protection Act 1998; (b) the Data Protection Tribunal constituted under that section, in respect of its jurisdiction under section 48 of that Act. ” |
F1 Access to Health Records (Northern Ireland) Order 1993 (1993/1250 (N.I. 4))
F1 17 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
18 In Article 5(4) of that Order (cases where fee may be required) in sub-paragraph (a), for “the maximum prescribed under section 21 of the Data Protection Act 1984” there is substituted “ such maximum as may be prescribed for the purposes of this Article by regulations under section 7 of the Data Protection Act 1998 ” .
19 In Article 7 of that Order (cases where right of access may be partially excluded) for the words from the beginning to “record” in the first place where it occurs there is substituted “ Access shall not be given under Article 5(2) to any part of a health record ” .
Section 74(2).
F1 SCHEDULE 16 Repeals and revocations
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .