Data Protection Act 2018

Clause 2, page 2, line 6 after “lawfully” insert “and fairly”

Clause 2, page 2, line 9 after “data” insert “and to require inaccurate personal data to be rectified”

Clause 2, page 2, line 15 at end insert—

The protection of personal data may not be lawfully restricted or limited unless such restrictions and limitations are consistent with the principle of proportionality.”

Clause 124, page 69, line 7 at end insert—

““children” means people under the age of 18;”

Clause 144, page 79, line 26 at end insert—

An information notice does not require a person to give the Commissioner information to the extent that requiring the person to do so would involve an infringement of the privileges of either House of Parliament.”

Clause 147, page 81, line 37 at end insert—

An assessment notice does not require a person to do something to the extent that requiring the person to do it would involve an infringement of the privileges of either House of Parliament.”

Clause 151, page 85, line 27 at end insert—

An enforcement notice does not require a person to do something to the extent that requiring the person to do it would involve an infringement of the privileges of either House of Parliament.”

Clause 155, page 87, line 28 at end insert—

The Commissioner may not give a controller or processor a penalty notice with respect to the processing of personal data where the purposes and manner of the processing are determined by or on behalf of either House of Parliament.”

Clause 155, page 87, line 31 leave out “under” and insert “by virtue of”

Clause 202, page 119, line 33 leave out from beginning to end of line 34 and insert—

As regards criminal liability—

Clause 202, page 119, line 40 leave out subsection (7)

Clause 203, page 120, line 15 leave out from beginning to end of line 16 and insert—

As regards criminal liability—

Clause 203, page 120, line 21 leave out subsection (6)

Schedule 1, page 123, line 30 leave out paragraphs (a) and (b)

Schedule 1, page 123, line 35 at end insert—

This condition is met if the processing is necessary—

Schedule 1, page 126, line 34 leave out from beginning to end of line 34 on page 128 and insert—

This condition is met if the processing—

Schedule 1, page 134, line 21 at end insert—

This condition is met if the processing—

Schedule 2, page 144, line 2 after “provisions” insert “and Article 34(1) and (4) of the GDPR (communication of personal data breach to the data subject)”

Schedule 6, page 182, line 6 leave out “and (d)”

Schedule 8, page 184, line 24 leave out “a purpose listed in sub-paragraph (2)” and insert “the exercise of a function conferred on a person by an enactment or rule of law”