This Act makes provision about the processing of personal data.
Most processing of personal data is subject to the UK GDPR.
Part 2 supplements the UK GDPR.
Part 3 makes provision about the processing of personal data by competent authorities for law enforcement purposes ....
Part 4 makes provision about the processing of personal data by the intelligence services (and certain processing carried out by competent authorities jointly with the intelligence services).
Part 5 makes provision about the Information Commissioner.
Part 6 makes provision about the enforcement of the data protection legislation.
Part 7 makes supplementary provision, including provision about the application of this Act to the Crown and to Parliament.