Section 2: Protection of personal data

Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk

Part 1: Preliminary

The UK GDPR and this Act protect individuals with regard to the processing of personal data, in particular by—

requiring personal data to be processed lawfully and fairly, on the basis of the data subject's consent or another specified basis,
conferring rights on the data subject to obtain information about the processing of personal data and to require inaccurate personal data to be rectified, and
conferring functions on the Commissioner, giving the holder of that office responsibility for monitoring and enforcing their provisions.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

About this text

This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.

Reuse reviewed 21 August 2026 under Open Government Licence v3.0.