Section 1: Overview

Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk

Part 1: Preliminary

This Act makes provision about the processing of personal data.

Most processing of personal data is subject to the UK GDPR.

Part 2 supplements the UK GDPR.

Part 3 makes provision about the processing of personal data by competent authorities for law enforcement purposes ....

Part 4 makes provision about the processing of personal data by the intelligence services (and certain processing carried out by competent authorities jointly with the intelligence services).

Part 5 makes provision about the Information Commissioner.

Part 6 makes provision about the enforcement of the data protection legislation.

Part 7 makes supplementary provision, including provision about the application of this Act to the Crown and to Parliament.

About this text

This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.

Reuse reviewed 21 August 2026 under Open Government Licence v3.0.