Section 32A

The Commissioner must encourage representative bodies to produce codes of conduct intended to contribute to compliance with these Regulations. Under paragraph (1), the Commissioner must encourage representative bodies to produce codes which take account of, among other things, the specific features of different sectors. A code of conduct described in paragraph (1) may, for example, make provision with regard to— rights and obligations under these Regulations; out-of-court proceedings and other dispute resolution procedures for resolving disputes arising in connection with these Regulations. The Commissioner must encourage representative bodies to submit codes of conduct described in paragraph (1) to the Commissioner in draft. Where a representative body does so, the Commissioner must— provide the representative body with an opinion on whether the code correctly reflects the requirements of these Regulations, decide whether to approve the code, and if the code is approved, register and publish the code. The Commissioner may only approve a code if, among other things— the code contains a mechanism for monitoring whether persons who undertake to apply the code comply with its provisions, and in relation to persons other than public bodies, the mechanism involves monitoring by a body which is accredited for that purpose by the Commissioner under regulation 32B. In relation to amendments of a code of conduct that is for the time being approved under this regulation— paragraphs (4) and (5) apply as they apply in relation to a code, and the requirements in paragraph (6) must be satisfied by the code as amended. A code of conduct described in paragraph (1) may be contained in the same document as a code of conduct described in Article 40 of the UK GDPR (and a provision contained in such a document may be a provision of both codes). In this regulation— “public body” has the meaning given in section 7 of the Data Protection Act 2018 (for the purposes of the UK GDPR); “representative body” means an association or other body representing categories of— communications providers, or other persons engaged in activities regulated by these Regulations; “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

← 32 · All articles · 1 →

Source: legislation.gov.uk · retrieved 2026-09-04