Regulations bringing into force on 25 May the majority of the provisions of the Data Protection Act 2018 have been made.
Data Protection Act 2018 is mainly in force
The sections which are not yet in force primarily relate to intelligence services processing and minor and consequential amendments. Also, not yet in force, but which come into force on 23 July, are provisions dealing with the Information Commissioner’s duty to prepare a number of codes of practice, the representation of data subjects and the framework for data processing by the government
The Regulations also introduce transitional and savings provisions for the purposes of enforcing the Electronic Identification and Trust Services for Electronic Transactions Regulations and Regulation (EU) No 910/2014 of the European Parliament and of the Council in electronic identification and trust services for electronic transactions in the internal market (as amended). These transitional and savings provisions deal with powers of entry and inspection, appeals, and the service of information, assessment and enforcement notices where these have been served (but not cancelled), are in force, or remain outstanding on or after 25 May.