Section 1
This Act makes provision about the processing of personal data. Most processing of personal data is subject to the UK GDPR. Part 2 supplements the UK GDPR. Part 3 makes provision about the processing of personal data by competent authorities for law enforcement purposes .... Part 4 makes provision about the processing of personal data by the intelligence services (and certain processing carried out by competent authorities jointly with the intelligence services). Part 5 makes provision about the Information Commissioner. Part 6 makes provision about the enforcement of the data protection legislation. Part 7 makes supplementary provision, including provision about the application of this Act to the Crown and to Parliament.
Source: legislation.gov.uk · retrieved 2026-09-04