Section 119: Inspection of personal data in accordance with international obligations

Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk

Part 5: The Information Commissioner

The Commissioner may inspect personal data where the inspection is necessary in order to discharge an international obligation of the United Kingdom, subject to the restriction in subsection (2).

The power under subsection (1) is exercisable only if the personal data—

is processed wholly or partly by automated means, or
is processed otherwise than by automated means and forms part of a filing system or is intended to form part of a filing system.

The power under subsection (1) includes power to inspect, operate and test equipment which is used for the processing of personal data.

Before exercising the power under subsection (1), the Commissioner must by written notice inform the controller and any processor that the Commissioner intends to do so.

Subsection (4) does not apply if the Commissioner considers that the case is urgent.

It is an offence—

intentionally to obstruct a person exercising the power under subsection (1), or
to fail without reasonable excuse to give a person exercising that power any assistance the person may reasonably require.

Paragraphs (c) and (d) of section 3(14) do not apply to references in this section to personal data, the processing of personal data, a controller or a processor.

About this text

This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.

Reuse reviewed 21 August 2026 under Open Government Licence v3.0.