Section 161: Approval of first guidance about regulatory action

Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk

Part 6: Enforcement

When the first guidance is produced under section 160(1)—

the Commissioner must submit the final version to the Secretary of State, and
the Secretary of State must lay the guidance before Parliament.

If, within the 40-day period, either House of Parliament resolves not to approve the guidance—

the Commissioner must not issue the guidance, and
the Commissioner must produce another version of the guidance (and this section applies to that version).

If, within the 40-day period, no such resolution is made—

the Commissioner must issue the guidance, and
the guidance comes into force at the end of the period of 21 days beginning with the day on which it is issued.

Nothing in subsection (2)(a) prevents another version of the guidance being laid before Parliament.

In this section, "the 40-day period" means—

if the guidance is laid before both Houses of Parliament on the same day, the period of 40 days beginning with that day, or
if the guidance is laid before the Houses of Parliament on different days, the period of 40 days beginning with the later of those days.

In calculating the 40-day period, no account is to be taken of any whole days that fall within a period during which Parliament is dissolved or prorogued or during which both Houses of Parliament are adjourned for more than 4 days.

About this text

This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.

Reuse reviewed 21 August 2026 under Open Government Licence v3.0.