Reference:GBR Data Protection Act 2018 06-Jun-2022 Article 2

Document information
Reference	GBR Data Protection Act 2018 06-Jun-2022
Validity area	GBR
Scope(s)	G
Document name	Data Protection Act 2018
Version / Revision	06-Jun-2022
Status	Current
Document type	Legal act
Language(s)	EN
Description	Data Protection Act 2018 2018 CHAPTER 12 An Act to make provision for the regulation of the processing of information relating to individuals; to make provision in connection with the Information Commissioner's functions under certain regulations relating to information; to make provision for a direct marketing code of practice; and for connected purposes.
Official source	Official link
Restricted access	No
Submitted by	Florian Adragna
Contributors

Reference Details
Module	Module 3 — Unit 3.1.3
Scope	G
Document part	Article 2
Language	EN
Original entry by	Florian Adragna
Contributors
Tags	Data protection, Informed consent, Requirements
Comment	UK GDPR and Data Protection Act: protection of individuals

Content

2 Protection of personal data (1) The [F4UK GDPR] and this Act protect individuals with regard to the processing ofpersonal data, in particular by— (a) requiring personal data to be processed lawfully and fairly, on the basis of thedata subject's consent or another specified basis, (b) conferring rights on the data subject to obtain information about theprocessing of personal data and to require inaccurate personal data to berectified, and (c) conferring functions on the Commissioner, giving the holder of that officeresponsibility for monitoring and enforcing their provisions.

(2) When carrying out functions under the [F5UK GDPR] and this Act, the Commissioner must have regard to the importance of securing an appropriate level of protection forpersonal data, taking account of the interests of data subjects, controllers and othersand matters of general public interest.