Loading…

F1Data Protection Act 1998

1998 CHAPTER 29cross-notes

An Act to make new provision for the regulation of the processing of information relating to individuals, including the obtaining, holding, use or disclosure of such information.

[16th July 1998]

Be it enacted by the Queen’s most Excellent Majesty, by and with the advice and consent of the Lords Spiritual and Temporal, and Commons, in this present Parliament assembled, and by the authority of the same, as follows:—

case F1Part I Preliminary

Cases considering this provision (2)

case F11 Basic interpretative provisions.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (76)

and 71 more in the case-law panel for this provision

case F12 Sensitive personal data.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (49)

and 44 more in the case-law panel for this provision

case F13 The special purposes.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (8)

and 3 more in the case-law panel for this provision

case F14 The data protection principles.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (58)

and 53 more in the case-law panel for this provision

case F15 Application of Act.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

case F16 The Commissioner . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

case F1Part II Rights of data subjects and others

Cases considering this provision (4)

case F17 Right of access to personal data.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (75)

and 70 more in the case-law panel for this provision

case F18 Provisions supplementary to section 7.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (17)

and 12 more in the case-law panel for this provision

case F19 Application of section 7 where data controller is credit reference agency.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

F19A Unstructured personal data held by public authorities.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F110 Right to prevent processing likely to cause damage or distress.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (24)

and 19 more in the case-law panel for this provision

case F111 Right to prevent processing for purposes of direct marketing.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

case F112 Rights in relation to automated decision-taking.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

F112A Rights of data subjects in relation to exempt manual data.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F113 Compensation for failure to comply with certain requirements.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (80)

and 75 more in the case-law panel for this provision

case F114 Rectification, blocking, erasure and destruction.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (29)

and 24 more in the case-law panel for this provision

case F115 Jurisdiction and procedure.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (16)

and 11 more in the case-law panel for this provision

case F1Part III Notification by data controllers

Cases considering this provision (1)

case F116 Preliminary.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F117 Prohibition on processing without registration.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

case F118 Notification by data controllers.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F119 Register of notifications.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

case F120 Duty to notify changes.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F121 Offences.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

F122 Preliminary assessment by Commissioner.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F123 Power to make provision for appointment of data protection supervisors.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F124 Duty of certain data controllers to make certain information available.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

F125 Functions of Commissioner in relation to making of notification regulations.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F126 Fees regulations.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F1Part IV Exemptions

Cases considering this provision (7)

and 2 more in the case-law panel for this provision

case F127 Preliminary.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (15)

and 10 more in the case-law panel for this provision

case F128 National security.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (7)

and 2 more in the case-law panel for this provision

case F129 Crime and taxation.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (23)

and 18 more in the case-law panel for this provision

case F130 Health, education and social work.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F131 Regulatory activity.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

case F132 Journalism, literature and art.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (18)

and 13 more in the case-law panel for this provision

case F133 Research, history and statistics.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F133A Manual data held by public authorities.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F134 Information available to the public by or under enactment.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F135 Disclosures required by law or made in connection with legal proceedings etc.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (29)

and 24 more in the case-law panel for this provision

F135A Parliamentary privilege.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F136 Domestic purposes.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (3)

case F137 Miscellaneous exemptions.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (3)

case F138 Powers to make further exemptions by order.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F139 Transitional relief.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F1 Part V Enforcement

Cases considering this provision (3)

case F140 Enforcement notices.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (8)

and 3 more in the case-law panel for this provision

case F141 Cancellation of enforcement notice.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

F141A Assessment notices

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F141B Assessment notices: limitations

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F141C Code of practice about assessment notices

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F142 Request for assessment.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (5)

case F143 Information notices.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (3)

case F144 Special information notices.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F145 Determination by Commissioner as to the special purposes.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (4)

F146 Restriction on enforcement in case of processing for the special purposes.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F147 Failure to comply with notice.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F148 Rights of appeal.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (5)

case F149 Determination of appeals.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

case F150 Powers of entry and inspection.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case Part VI Miscellaneous and General cross-notes

Cases considering this provision (1)

F1 Functions of Commissioner

case F151 General duties of Commissioner.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (4)

F152 Reports and codes of practice to be laid before Parliament.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F152A Data-sharing code

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F152AA Direct marketing code

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F152B data-sharing and direct marketing codes: procedure

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F152C Alteration or replacement of data-sharing and direct marketing codes

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F152D Publication of data-sharing and direct marketing codes

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F152E Effect of data-sharing and direct marketing codes

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F153 Assistance by Commissioner in cases involving processing for the special purposes.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F154 International co-operation.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

F154A Inspection of overseas information systems

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 Unlawful obtaining et ceteralaetc. of personal data

case F155 Unlawful obtaining etc. of personal data.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (20)

and 15 more in the case-law panel for this provision

F1Monetary penalties

case F155A Power of Commissioner to impose monetary penalty

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (3)

F155B Monetary penalty notices: procedural rights

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F155C Guidance about monetary penalty notices

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F155D Monetary penalty notices: enforcement

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SI F155E Notices under sections 55A and 55B: supplemental

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 Records obtained under data subject’s right of access

case F156 Prohibition of requirement as to production of certain records.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

F157 Avoidance of certain contractual terms relating to health records.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 Information provided to Commissioner or Tribunal

case F158 Disclosure of information.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F159 Confidentiality of information.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 General provisions relating to offences

F160 Prosecutions and penalties.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F161 Liability of directors etc.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

Amendments of Consumer Credit Act 1974

62 Amendments of Consumer Credit Act 1974.

(1)M1In section 158 of the Consumer Credit Act 1974 (duty of agency to disclose filed information)—

(a)in subsection (1)—

(i)in paragraph (a) for “individual” there is substituted “ partnership or other unincorporated body of persons not consisting entirely of bodies corporate ”, and

(ii)for “him” there is substituted “ it ”,

(b)in subsection (2), for “his” there is substituted “ the consumer’s ”, and

(c)in subsection (3), for “him” there is substituted “ the consumer ”.

(2)In section 159 of that Act (correction of wrong information) for subsection (1) there is substituted—

“(1)Any individual (the “objector”) given—

(a)information under section 7 of the Data Protection Act 1998 by a credit reference agency, or

(b)information under section 158,

who considers that an entry in his file is incorrect, and that if it is not corrected he is likely to be prejudiced, may give notice to the agency requiring it either to remove the entry from the file or amend it.”

(3)In subsections (2) to (6) of that section—

(a)for “consumer”, wherever occurring, there is substituted “ objector ”, and

(b)for “Director”, wherever occurring, there is substituted “ the relevant authority ”.

(4)After subsection (6) of that section there is inserted—

“(7)The Data Protection Commissioner may vary or revoke any order made by him under this section.

(8)In this section “the relevant authority” means—

(a)where the objector is a partnership or other unincorporated body of persons, the Director, and

(b)in any other case, the Data Protection Commissioner.”

(5)In section 160 of that Act (alternative procedure for business consumers)—

(a)in subsection (4)—

(i)for “him” there is substituted “ to the consumer ”, and

(ii)in paragraphs (a) and (b) for “he” there is substituted “ the consumer ” and for “his” there is substituted “ the consumer’s ”, and

(b)after subsection (6) there is inserted—

“(7)In this section “consumer” has the same meaning as in section 158.”

F1 General

case F163 Application to Crown.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

F163A Application to Parliament.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F164 Transmission of notices etc. by electronic or other means.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F165 Service of notices by Commissioner.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F166 Exercise of rights in Scotland by children.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F167 Orders, regulations and rules.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

case F168 Meaning of “accessible record”.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (2)

case F169 Meaning of “health professional”.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

case F170 Supplementary definitions.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (9)

and 4 more in the case-law panel for this provision

F171 Index of defined expressions.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F172 Modifications of Act.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F173 Transitional provisions and savings.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F174 Minor and consequential amendments and repeals and revocations.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F175 Short title, commencement and extent.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SCHEDULES

Section 4(1) and (2).

case F1SCHEDULE 1 The data protection principles

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (29)

and 24 more in the case-law panel for this provision

Section 4(3).

case F1SCHEDULE 2 Conditions relevant for purposes of the first principle: processing of any personal data

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (25)

and 20 more in the case-law panel for this provision

Section 4(3).

case F1SCHEDULE 3 Conditions relevant for purposes of the first principle: processing of sensitive personal data

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (19)

and 14 more in the case-law panel for this provision

Section 4(3).

F1SCHEDULE 4 Cases where the eighth principle does not apply

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Section 6(7).

F1SCHEDULE 5 The Data Protection Commissioner . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Sections 28(12), 48(5).

case F1 SCHEDULE 6 Appeal proceedings

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

Section 37.

case F1SCHEDULE 7 Miscellaneous exemptions

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Section 39.

case F1SCHEDULE 8 Transitional relief

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Cases considering this provision (1)

Section 50.

F1 SCHEDULE 9 Powers of entry and inspection

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Section 53(6).

F1SCHEDULE 10 Further provisions relating to assistance under section 53

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Section 68(1)(6).

F1SCHEDULE 11 Educational records

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Section 68(1)(c).

F1SCHEDULE 12 Accessible public records

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Section 72.

F1SCHEDULE 13 Modifications of Act having effect before 24th October 2007

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Section 73.

F1SCHEDULE 14 Transitional provisions and savings

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Section 74(1).

SCHEDULE 15 Minor and consequential amendments

F1Public Records Act 1958 (c. 51)

F11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Parliamentary Commissioner Act 1967 (c. 13)

F12 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F13 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Superannuation Act 1972 (c. 11)

F14 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1House of Commons Disqualification Act 1975 (c. 24)

F15 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Northern Ireland Assembly Disqualification Act 1975 (c. 25)

F16 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Representation of the People Act 1983 (c. 2)

F17 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1 Access to Medical Reports Act 1988 (c. 28)

F18 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Football Spectators Act 1989 (c. 37)

F19 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Education (Student Loans) Act 1990 (c. 6)

F110 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Access to Health Records Act 1990 (c. 23)

F111 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F112 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

13 In section 5(3) of that Act (cases where right of access may be partially excluded) for the words from the beginning to “record” in the first place where it occurs there is substituted “ Access shall not be given under section 3(2) to any part of a health record ”.

F1 Access to Personal Files and Medical Reports (Northern Ireland) Order 1991 (1991/1707 (N.I. 14))

F114 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

15 In Article 6(1) of that Order (interpretation), in the definition of “health professional”, for “the Data Protection (Subject Access Modification) (Health) Order 1987” there is substituted “ the Data Protection Act 1998 ”.

Tribunals and Inquiries Act 1992 (c. 53)

16 In Part 1 of Schedule 1 to the Tribunals and Inquiries Act 1992 (tribunals under direct supervision of Council on Tribunals), for paragraph 14 there is substituted—

“Data protection

14.

(a) The Data Protection Commissioner appointed under section 6 of the Data Protection Act 1998;

(b) the Data Protection Tribunal constituted under that section, in respect of its jurisdiction under section 48 of that Act.”

F1 Access to Health Records (Northern Ireland) Order 1993 (1993/1250 (N.I. 4))

F117 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

18 In Article 5(4) of that Order (cases where fee may be required) in sub-paragraph (a), for “the maximum prescribed under section 21 of the Data Protection Act 1984” there is substituted “ such maximum as may be prescribed for the purposes of this Article by regulations under section 7 of the Data Protection Act 1998 ”.

19 In Article 7 of that Order (cases where right of access may be partially excluded) for the words from the beginning to “record” in the first place where it occurs there is substituted “ Access shall not be given under Article 5(2) to any part of a health record ”.

Section 74(2).

F1SCHEDULE 16 Repeals and revocations

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Status: Data Protection Act 1998 is up to date with all changes known to be in force on or before 24 August 2025. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
Data Protection Act 1998 (1998/29)
Version from: 2 December 2019

Details appear here

Hover a defined term or a footnote marker in the text, or select a case si note chip beside a section.

In-force status is shown at the top of the page. Upcoming changes are listed under the Future changes tab.

in force Provision is in force
in force* In force only for specified purposes (for detail about the purposes see/hover footnote)
not in force Not in force in England (may be in force in other geographies, see footnotes)
italics Defined term
dfn Defined term (alternative style)
gry bckgrd the in-force status of the provision is complex, check the footnotes

Status of changes to instrument text

The list includes made instruments, both those in force and those yet to come into force. Typically, instruments that are not yet in force (hence their changes are not incorporated into the text above) are indicated by description 'not yet' in the changes made column.