The Secretary of State, in exercise of the powers conferred on him by sections 7(2), (7), (8) and (11) (having regard to the definitions of “prescribed”, “the prescribed maximum” and “the prescribed period” in section 7(10)), 8(1) and 67(2) of the Data Protection Act 1998(1) and having consulted the Data Protection Commissioner in accordance with section 67(3) of that Act, hereby makes the following Regulations: