Chwilio Deddfwriaeth

Data Protection Act 1998

Status:

Point in time view as at 16/07/1998. This version of this part contains provisions that are not valid for this point in time. Help about Status

Close

Status

Not valid for this point in time generally means that a provision was not in force for the point in time you have selected to view it on.

Changes to legislation:

Data Protection Act 1998, Part I is up to date with all changes known to be in force on or before 18 May 2024. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations. Help about Changes to Legislation

Close

Changes to Legislation

Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.

Part IU.K. Preliminary

1 Basic interpretative provisions.U.K.

(1)In this Act, unless the context otherwise requires—

  • data” means information which—

    (a)

    is being processed by means of equipment operating automatically in response to instructions given for that purpose,

    (b)

    is recorded with the intention that it should be processed by means of such equipment,

    (c)

    is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system, or

    (d)

    does not fall within paragraph (a), (b) or (c) but forms part of an accessible record as defined by section 68;

  • data controller” means, subject to subsection (4), a person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed;

  • data processor”, in relation to personal data, means any person (other than an employee of the data controller) who processes the data on behalf of the data controller;

  • data subject” means an individual who is the subject of personal data;

  • personal data” means data which relate to a living individual who can be identified—

    (a)

    from those data, or

    (b)

    from those data and other information which is in the possession of, or is likely to come into the possession of, the data controller,

    and includes any expression of opinion about the individual and any indication of the intentions of the data controller or any other person in respect of the individual;

  • processing”, in relation to information or data, means obtaining, recording or holding the information or data or carrying out any operation or set of operations on the information or data, including—

    (a)

    organisation, adaptation or alteration of the information or data,

    (b)

    retrieval, consultation or use of the information or data,

    (c)

    disclosure of the information or data by transmission, dissemination or otherwise making available, or

    (d)

    alignment, combination, blocking, erasure or destruction of the information or data;

  • relevant filing system” means any set of information relating to individuals to the extent that, although the information is not processed by means of equipment operating automatically in response to instructions given for that purpose, the set is structured, either by reference to individuals or by reference to criteria relating to individuals, in such a way that specific information relating to a particular individual is readily accessible.

(2)In this Act, unless the context otherwise requires—

(a)obtaining” or “recording”, in relation to personal data, includes obtaining or recording the information to be contained in the data, and

(b)using” or “disclosing”, in relation to personal data, includes using or disclosing the information contained in the data.

(3)In determining for the purposes of this Act whether any information is recorded with the intention—

(a)that it should be processed by means of equipment operating automatically in response to instructions given for that purpose, or

(b)that it should form part of a relevant filing system,

it is immaterial that it is intended to be so processed or to form part of such a system only after being transferred to a country or territory outside the European Economic Area.

(4)Where personal data are processed only for purposes for which they are required by or under any enactment to be processed, the person on whom the obligation to process the data is imposed by or under that enactment is for the purposes of this Act the data controller.

2 Sensitive personal data.U.K.

In this Act “sensitive personal data” means personal data consisting of information as to—

(a)the racial or ethnic origin of the data subject,

(b)his political opinions,

(c)his religious beliefs or other beliefs of a similar nature,

(d)whether he is a member of a trade union (within the meaning of the M1Trade Union and Labour Relations (Consolidation) Act 1992),

(e)his physical or mental health or condition,

(f)his sexual life,

(g)the commission or alleged commission by him of any offence, or

(h)any proceedings for any offence committed or alleged to have been committed by him, the disposal of such proceedings or the sentence of any court in such proceedings.

Marginal Citations

3 The special purposes.U.K.

In this Act “the special purposes” means any one or more of the following—

(a)the purposes of journalism,

(b)artistic purposes, and

(c)literary purposes.

Yn ddilys o 01/03/2000

4 The data protection principles.U.K.

(1)References in this Act to the data protection principles are to the principles set out in Part I of Schedule 1.

(2)Those principles are to be interpreted in accordance with Part II of Schedule 1.

(3)Schedule 2 (which applies to all personal data) and Schedule 3 (which applies only to sensitive personal data) set out conditions applying for the purposes of the first principle; and Schedule 4 sets out cases in which the eighth principle does not apply.

(4)Subject to section 27(1), it shall be the duty of a data controller to comply with the data protection principles in relation to all personal data with respect to which he is the data controller.

Yn ddilys o 01/03/2000

5 Application of Act.U.K.

(1)Except as otherwise provided by or under section 54, this Act applies to a data controller in respect of any data only if—

(a)the data controller is established in the United Kingdom and the data are processed in the context of that establishment, or

(b)the data controller is established neither in the United Kingdom nor in any other EEA State but uses equipment in the United Kingdom for processing the data otherwise than for the purposes of transit through the United Kingdom.

(2)A data controller falling within subsection (1)(b) must nominate for the purposes of this Act a representative established in the United Kingdom.

(3)For the purposes of subsections (1) and (2), each of the following is to be treated as established in the United Kingdom—

(a)an individual who is ordinarily resident in the United Kingdom,

(b)a body incorporated under the law of, or of any part of, the United Kingdom,

(c)a partnership or other unincorporated association formed under the law of any part of the United Kingdom, and

(d)any person who does not fall within paragraph (a), (b) or (c) but maintains in the United Kingdom—

(i)an office, branch or agency through which he carries on any activity, or

(ii)a regular practice;

and the reference to establishment in any other EEA State has a corresponding meaning.

Modifications etc. (not altering text)

C1S. 5 modified by S.I. 1993/1813, art. 4(2) (as substituted (coming into force in accordance with art. 1(2) of the amending S.I.) by S.I. 2001/1544, art. 3(5)(6))

Yn ddilys o 01/03/2000

6 The Commissioner and the Tribunal.U.K.

(1)The office originally established by section 3(1)(a) of the M2Data Protection Act 1984 as the office of Data Protection Registrar shall continue to exist for the purposes of this Act but shall be known as the office of Data Protection Commissioner; and in this Act the Data Protection Commissioner is referred to as “the Commissioner”.

(2)The Commissioner shall be appointed by Her Majesty by Letters Patent.

(3)For the purposes of this Act there shall continue to be a Data Protection Tribunal (in this Act referred to as “the Tribunal”).

(4)The Tribunal shall consist of—

(a)a chairman appointed by the Lord Chancellor after consultation with the Lord Advocate,

(b)such number of deputy chairmen so appointed as the Lord Chancellor may determine, and

(c)such number of other members appointed by the Secretary of State as he may determine.

(5)The members of the Tribunal appointed under subsection (4)(a) and (b) shall be—

(a)persons who have a 7 year general qualification, within the meaning of section 71 of the M3Courts and Legal Services Act 1990,

(b)advocates or solicitors in Scotland of at least 7 years’ standing, or

(c)members of the bar of Northern Ireland or solicitors of the Supreme Court of Northern Ireland of at least 7 years’ standing.

(6)The members of the Tribunal appointed under subsection (4)(c) shall be—

(a)persons to represent the interests of data subjects, and

(b)persons to represent the interests of data controllers.

(7)Schedule 5 has effect in relation to the Commissioner and the Tribunal.

Modifications etc. (not altering text)

C2S. 6(4)(a)(b): transfer of certain functions (1.7.1999) by 1999/1750, arts. 1,2, (with art. 7) Sch. 1 ; S.I. 1998/3178, art. 3

S. 6(4)(a)(b) modified (30.6.1999) by S.I. 1999/1748, art. 3, Sch. 1 para. 20

C3s. 6(4)(a): functions of the Lord Advocate transferred to the Secretary of State,and all property, rights and liabilities to which the Lord Advocate is entitled or subject in connection with any such function transferred to the Secretary of State for Scotland (19.5.1999) by S.I. 1999/678, arts. 2, 3, Sch (with art. 7)

Marginal Citations

Yn ôl i’r brig

Options/Help

Print Options

You have chosen to open The Whole Act

The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.

Would you like to continue?

You have chosen to open The Whole Act as a PDF

The Whole Act you have selected contains over 200 provisions and might take some time to download.

Would you like to continue?

You have chosen to open y Ddeddf Gyfan

Y Ddeddf Gyfan you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.

Would you like to continue?

Close

Mae deddfwriaeth ar gael mewn fersiynau gwahanol:

Y Diweddaraf sydd Ar Gael (diwygiedig):Y fersiwn ddiweddaraf sydd ar gael o’r ddeddfwriaeth yn cynnwys newidiadau a wnaed gan ddeddfwriaeth ddilynol ac wedi eu gweithredu gan ein tîm golygyddol. Gellir gweld y newidiadau nad ydym wedi eu gweithredu i’r testun eto yn yr ardal ‘Newidiadau i Ddeddfwriaeth’.

Gwreiddiol (Fel y’i Deddfwyd neu y’i Gwnaed): Mae'r wreiddiol fersiwn y ddeddfwriaeth fel ag yr oedd pan gafodd ei deddfu neu eu gwneud. Ni wnaed unrhyw newidiadau i’r testun.

Pwynt Penodol mewn Amser: This becomes available after navigating to view revised legislation as it stood at a certain point in time via Advanced Features > Show Timeline of Changes or via a point in time advanced search.

Close

Gweler y wybodaeth ychwanegol ochr yn ochr â’r cynnwys

Rhychwant ddaearyddol: Indicates the geographical area that this provision applies to. For further information see ‘Frequently Asked Questions’.

Dangos Llinell Amser Newidiadau: See how this legislation has or could change over time. Turning this feature on will show extra navigation options to go to these specific points in time. Return to the latest available version by using the controls above in the What Version box.

Close

Dewisiadau Agor

Dewisiadau gwahanol i agor deddfwriaeth er mwyn gweld rhagor o gynnwys ar y sgrin ar yr un pryd

Close

Rhagor o Adnoddau

Gallwch wneud defnydd o ddogfennau atodol hanfodol a gwybodaeth ar gyfer yr eitem ddeddfwriaeth o’r tab hwn. Yn ddibynnol ar yr eitem ddeddfwriaeth sydd i’w gweld, gallai hyn gynnwys:

  • y PDF print gwreiddiol y fel deddfwyd fersiwn a ddefnyddiwyd am y copi print
  • rhestr o newidiadau a wnaed gan a/neu yn effeithio ar yr eitem hon o ddeddfwriaeth
  • manylion rhoi grym a newid cyffredinol
  • pob fformat o’r holl ddogfennau cysylltiedig
  • slipiau cywiro
  • dolenni i ddeddfwriaeth gysylltiedig ac adnoddau gwybodaeth eraill
Close

Llinell Amser Newidiadau

This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.

Close

Rhagor o Adnoddau

Defnyddiwch y ddewislen hon i agor dogfennau hanfodol sy’n cyd-fynd â’r ddeddfwriaeth a gwybodaeth am yr eitem hon o ddeddfwriaeth. Gan ddibynnu ar yr eitem o ddeddfwriaeth sy’n cael ei gweld gall hyn gynnwys:

  • y PDF print gwreiddiol y fel deddfwyd fersiwn a ddefnyddiwyd am y copi print
  • slipiau cywiro

liciwch ‘Gweld Mwy’ neu ddewis ‘Rhagor o Adnoddau’ am wybodaeth ychwanegol gan gynnwys

  • rhestr o newidiadau a wnaed gan a/neu yn effeithio ar yr eitem hon o ddeddfwriaeth
  • manylion rhoi grym a newid cyffredinol
  • pob fformat o’r holl ddogfennau cysylltiedig
  • dolenni i ddeddfwriaeth gysylltiedig ac adnoddau gwybodaeth eraill