Watchtower/Law library/Data (Use and Access) Act 2025
As last captured

legislation

Data (Use and Access) Act 2025

Data (Use and Access) Act 2025 establishes the DVS register under s. 32, governs underground asset data duties for undertakers under s. 56, and binds controllers to handle subject complaints under s. 103.

Verified at publication, 2026-11-12 11:12 UTC

313 provisions in 22 parts · official text ↗

trbfpseuipsvmemccm
impact by vertical

Summary

What this law does

Establishes a statutory framework for digital verification services including the DVS trust framework and register, provides for customer and business data sharing schemes, creates the National Underground Asset Register, reforms civil registration of births and deaths, transitions the Information Commissioner to the Information Commission, and amends the UK GDPR and Data Protection Act 2018 regarding research, automated decision-making, international transfers, and complaint handling.

Why it matters to Signicat and its customers

No Signicat-specific relevance narrative is stored for this instrument; the stored applicability is shown below.

Who is bound: controllers; processors; undertakers having apparatus in a street; relevant person executing works of any description in a street; accredited conformity assessment body; person registered in the DVS register; provider of a public electronic communications service; relevant IT provider; providers of regulated services; Secretary of State · Regulators: Information Commission; Secretary of State; Financial Conduct Authority; OFCOM; Registrar General

Transportation
Imposes reporting and data verification duties under the National Underground Asset Register when executing street works.
Banking Finance
Enables FCA customer and business data-sharing interface regulations and mandates updated data protection complaint handling.
Public Sector Health
Requires public authorities to follow digital verification rules, digitalises civil registers, and sets health IT provider standards.
Energy Utility Telco
Mandates utility apparatus data uploads to the National Underground Asset Register and reforms electronic communications rules.
Insurance Pensions
Governs international personal data transfers and establishes mandatory data subject complaint-handling procedures for controllers.
Services
Enables digital verification services for right to work and rent checks and reforms data subject complaint handling.
Media Entertainment
Requires regulated online services to retain deceased child user data upon receiving OFCOM information retention notices.
Manufacturing Construction
Applies right to work verification frameworks and requires apparatus reporting during construction and street works in NUAR.
Commerce
Regulates direct marketing communications, terminal equipment data storage, and mandatory direct complaint-handling channels.

Key obligations each linked to the provision it comes from

Under (1), the Secretary of State may refuse to register a person in the DVS register on national security grounds under (1)(a) or for failure to comply with the DVS trust framework under (1)(b). Prior written notice stating reasons and representation rights is required under (2) and (3). The Secretary of State must consider representations under (7). Notice of refusal may bar further applications for up to two years under (8), (9), and (11). Under (10), the Secretary of State must refuse any application made during that barred period.
s. 34
trust_framework.dvs_certification
Under (1), the Secretary of State may remove a person from the DVS register for non-compliance with the DVS trust framework under (1)(a), non-compliance with a supplementary code under (1)(b), failure to provide information under section 51 under (1)(c), or national security under (1)(d). Under (2) and (3), prior written notice of intention and reasons must be given, allowing at least 21 days under (5) for written representations. Oral representations may be arranged under (6), and representations must be considered under (7). Notice of removal under (8) may specify an application refusal period up to two years under (9) and (11), which requires mandatory refusal of re-registration applications under (10).
s. 41
trust_framework.dvs_certification
Under (1), the Secretary of State may by written notice require an accredited conformity assessment body or a person registered in the DVS register to provide information reasonably required for exercising Part 2 functions. The notice must state reasons under (2) and consequences under section 41 of failure to comply under (4). Disclosures required do not breach obligations of confidence or disclosure restrictions under (6).
s. 51
trust_framework.dvs_certificationevidence.audit_trail
Under (1), amends section 15 of the Immigration, Asylum and Nationality Act 2006 to allow orders to specify documents generated by, documents provided to, or steps involving the use of services provided by a DVS-registered person or a DVS-registered person of a specified description. Under (2), amends section 34 of the Immigration Act 2014 to enable residential tenancy orders to prescribe documents and checks involving DVS-registered persons. Under (3), amends Schedule 6 to the Immigration Act 2016 to enable illegal working compliance orders to prescribe checks and documents involving DVS-registered persons.
s. 55
checks.right_to_workchecks.right_to_renttrust_framework.dvs_certificationevidence.audit_trail
Under UK GDPR Article 12, a controller must respond before the end of the applicable time period, defined in Article 12A as one month from the latest of receiving the request, receiving requested identity information under Article 12(6), or payment of any charged fee. Under Article 12(6)(b), a controller may delay dealing with the request until the data subject's identity is confirmed. The period may be extended by two further months by notice stating reasons given within one month if necessary due to complexity or number of requests. Under Article 12A(5) and 2018 Act sections 54 and 94, where further information is reasonably required to identify requested processing, time is paused until received.
s. 76
data_protection.processor_controlsidentity_proofing.data_verification
Where an investigating authority notifies OFCOM of an investigation into a child's death with specified details, OFCOM must give notice under s.101(C1)(a) to a provider of a service within s.101(E1) to retain information relating to the child's service use, and may give notice under s.101(C1)(b) to any other relevant person. Notice recipients must take all reasonable steps without delay to prevent deletion by routine systems under s.101(D1), retain information for one year under s.102(5A)(c) (extendable under s.102(5B) by up to six months), and notify OFCOM by specified dates under s.102(5A)(d). Intentionally deleting or altering retained information to obstruct official investigations is an offence under s.109(6A), with senior manager liability under s.110(6A). Notices cannot require processing contravening data protection legislation under s.100(8A) and s.101(5A).
s. 124
retention.archiveevidence.audit_trail
Inserts Articles 45A, 45B, and 45C into the eIDAS Regulation. Article 45A empowers the Secretary of State by regulations to provide that specified overseas trust products (electronic signatures, seals, time stamps, or registered delivery services provided outside the UK) are treated as qualified for Articles 25(2), 35(2), 41(2), and 43(2). Article 45B allows regulations treating specified overseas electronic signatures or seals as compliant advanced or qualified signatures or seals for public sector body recognition under Articles 27 and 37. Under Articles 45A(3) and 45B(4), the Secretary of State may only make such regulations if satisfied that the reliability of the overseas product is at least equivalent to comparable qualified UK trust products or specified signature/seal standards, having regard to foreign law and related trust services. Article 45C mandates prior consultation with the supervisory body.
s. 132
signing.aessigning.qestimestamping.qualifiedtrust_framework.dvs_certification
Under section 3, regulations may include provision about authorisation procedures for customers, conditions for authorisation, and decision-maker evaluations. Regulations may require data holders, customers, or third party recipients to use specified facilities or services including dashboard services, electronic communications services, or application programming interfaces under subsection (4)(b), comply with specified standards under subsection (4)(c), and provide assistance. Under subsection (5), regulations may require data holders and third party recipients to produce, collect, or retain records of customer data provided or received. Regulations may also govern complaints and dispute resolution procedures.
s. 3
sharing.secureretention.archiveevidence.audit_trail
Section 4 empowers the Secretary of State or the Treasury under subsection (1) to make regulations requiring a data holder to publish business data or provide it to a customer or specified description of person. Under subsection (3), regulations may enable or require a data holder to produce, collect, or retain business data. Subsection (4) enables regulations requiring public authority third party recipients, or their appointed persons, to publish or provide business data, applying provisions of sections 5 to 21 other than imposing a levy.
s. 4
sharing.secureretention.archive
Regulations under section 4 may require business data to be provided on request and govern refusal circumstances under subsection (2). Regulations may restrict recipients to approved persons complying with conditions determined by decision-makers under subsection (3). Subsection (4) permits requiring data holders, customers, or third party recipients to use specified facilities or services like dashboard services or APIs, comply with standards, and provide assistance. Under subsection (5), regulations may require data holders and third party recipients to produce, collect, or retain records of business data.
s. 5
sharing.secureretention.archiveevidence.audit_trail
Section 6 applies to regulations about decision-makers authorised or required to take decisions regarding authorisation under section 3(2)(c) or approval under section 5(3)(b). Regulations may govern their appointment, suspension, or revocation of decisions, and confer monitoring powers under subsection (5) to assess compliance with conditions, including requiring documents or information under subsection (6). Regulations must provide for reviews and appeals for affected persons under subsection (7).
s. 6
evidence.audit_trailkyb.company_verification
Section 7 applies to interface bodies tasked with establishing, standard-setting, maintaining, or managing interfaces used for processing customer data or business data. Under subsection (3), regulations may require data holders or third party recipients to set up an interface body. Under subsection (4), regulations may govern governance, assistance, operational requirements, complaints, reviews, and monitoring powers to oversee interface and standard use, including requiring documents or information under subsection (5).
s. 7
sharing.secureevidence.audit_trail
The Secretary of State or the Treasury may make regulations for monitoring compliance and enforcement by a specified public authority (an enforcer) under subsection (1). Regulations may confer investigative powers under subsection (4), including requiring documents or information, attendance to answer questions, and powers of entry, search, and seizure. Regulations may authorise compliance notices under subsection (5), create criminal offences for false information or obstruction under subsection (6), and enable financial penalties under subsection (7).
s. 8
evidence.audit_trail
Under subsection (1), regulations may not authorise entry to a private dwelling without a justice's warrant, nor require provision of protected information to a decision-maker, interface body, or enforcer. Protected information includes House of Parliament privileged material under subsection (2), confidential communications with professional legal advisers for legal advice on Part 1 regulations under subsection (3), or contemplated legal proceedings under subsection (4). Under subsection (6), persons cannot be required to provide information exposing them to criminal prosecution.
s. 9
evidence.audit_trail
Section 11 empowers the Secretary of State or the Treasury to make regulations enabling data holders, decision-makers, interface bodies, enforcers, or other duty-bearers to charge fees for performing statutory duties or exercising powers under Part 1. Fees may only be payable by persons capable of being directly affected under subsection (4)(a), and may be intended to exceed the cost of the activities under subsection (4)(b). Regulations must specify the fee amount, determination method, or maximum cap under subsection (5), and require published fee information under subsection (7).
s. 11
The Treasury may make regulations enabling or requiring the FCA to make rules requiring financial services providers, third-party data recipients, or section 2(4) actors to use a prescribed interface, comply with interface standards, or participate in interface arrangements under subsection (1). Subsection (6) enables regulations allowing the FCA to impose additional requirements in response to compliance failures or to advance specified statutory purposes. Section 9 investigative restrictions apply to FCA interface rules and additional requirements under subsection (8).
s. 14
sharing.secureevidence.audit_trail
Under inserted section 106A, the Secretary of State must keep NUAR relating to apparatus in streets in England and Wales and enable access for mandated uploaders. Inserted section 106B requires an undertaker having apparatus in a street to enter into NUAR, before the end of the initial upload period, all information in records under section 79(1) on the archive upload date and other prescribed information. Under section 106E, undertakers may be required to pay fees to cover combined NUAR expenses, and under section 106F to provide related fee-determination information. Inserted section 106H permits third-party exercise of relevant functions.
s. 56
sharing.secureretention.archiveevidence.audit_traildata_protection.processor_controls
Under inserted section 79(3B), where an undertaker records information under subsection (1) or (1B) or updates it, the undertaker must, within a prescribed period, enter the information into NUAR. Under inserted section 80, a relevant person executing works in a street who finds unrecorded or incorrect apparatus must take reasonably practicable steps to inform the undertaker, or enter prescribed information into NUAR if unable to inform the undertaker.
s. 57
sharing.secureretention.archiveevidence.audit_trail
Under inserted Article 45A, the Secretary of State must keep NUAR relating to apparatus in streets in Northern Ireland, which may be kept jointly with England and Wales. Under inserted Article 45B, an undertaker having apparatus in a street must enter archive records and prescribed information into NUAR before the end of the initial upload period. Under Article 45E, undertakers may be required to pay fees to match combined NUAR expenses, and under Article 45F to furnish information to ascertain fees.
s. 58
sharing.secureretention.archiveevidence.audit_traildata_protection.processor_controls
Under inserted Article 39(3B), where an undertaker records information under paragraph (1) or (1B) or updates it, the undertaker must, within a prescribed period, enter the information into NUAR. Under inserted Article 40, a relevant person executing works in a street who finds unrecorded or incorrect apparatus must take reasonably practicable steps to inform the undertaker, or enter prescribed information into NUAR if unable to inform the undertaker.
s. 59
sharing.secureretention.archiveevidence.audit_trail
The repeal of section 28 of the Births and Deaths Registration Act 1953 preserves record-keeping duties under section 28(2) and (4). Registrars must deliver unfilled registers of live-births or deaths to the superintendent registrar, and forward unfilled still-birth registers to the Registrar General. Non-hard copy registers kept for a sub-district between 1 July 2009 and the coming into force of section 61 are treated as the official register under the 1953 Act; prior signatures remain valid. The Registrar General is permitted to dispose of certain certified copies and electronic quarterly return information.
s. 64
retention.archiveevidence.audit_trail
The Secretary of State may by regulations make provision adding descriptions of processing subject to Article 9(1) UK GDPR prohibition, removing added processing from it, or varying Article 9(2) exceptions for added processing. Under the 2018 Act (sections 42A and 91A), the Secretary of State may specify additional processing as sensitive processing for Part 3 or Part 4, provide that added processing is not sensitive processing, and vary reliance on protected conditions in Schedules 8 and 10. Under section 202A of the Investigatory Powers Act 2016, regulations may specify descriptions of Part 4 sensitive processing that constitute sensitive processing for bulk personal datasets under section 202.
s. 74
data_protection.processor_controls
Under section 45A of the 2018 Act, sections 44(2) and 45(1) do not require a controller to give information subject to legal professional privilege, confidentiality of communications in Scotland, or a legal adviser's duty of confidentiality to a client. A controller relying on the exemption must record the reason, provide it to the Commissioner on request, and inform the data subject in writing without undue delay of the decision, reasons, and rights to complain to the Commissioner or apply to court under section 167.
s. 79
data_protection.processor_controls
Adherence to a code of conduct approved under section 71A of the 2018 Act may be used by a controller or processor to demonstrate compliance with Part 3 general obligations, security of processing under section 66(1), or sufficient processor guarantees under section 59(2). The Commissioner must encourage expert public bodies to produce and submit draft codes of conduct taking account of sector-specific features. If submitted, the Commissioner must provide an opinion, decide whether to approve, and if approved, register and publish the code.
s. 84
data_protection.processor_controls
Under Chapter 8A of the UK GDPR (Articles 84A to 84D), personal data may only be processed for RAS purposes (scientific or historical research, public interest archiving, or statistical purposes) if it consists of collection, is carried out to convert data into non-identifying information, or the purposes cannot otherwise be fulfilled. Processing must be subject to appropriate safeguards respecting data minimisation (such as pseudonymisation). Safeguards are not satisfied if processing is likely to cause substantial damage or distress, or is carried out for measures or decisions regarding a particular data subject (except approved medical research). The Secretary of State may make further regulations regarding safeguards.
s. 86
data_protection.processor_controls
Under section 78A of the 2018 Act, specified provisions of Part 3 (including principles, data subject rights, breach notifications, international transfers, and enforcement powers) do not apply to personal data processed for law enforcement purposes if exemption is required for safeguarding national security. Certain core provisions remain excepted from the exemption, including lawful processing obligations under section 35(1) and sensitive processing safeguards. Under section 79, a certificate signed by a Minister of the Crown certifying that exemption is or was required is conclusive evidence of that fact.
s. 88
data_protection.processor_controls
The Commissioner may give an assessment notice requiring a controller or processor to arrange for an approved person to prepare a report on a specified matter and provide it to the Commissioner. The notice may specify terms regarding preparation, contents, form, and completion date. The controller or processor must nominate a person within the specified period, pay their remuneration and expenses, and provide all reasonable assistance. If no nomination is made or the nominated person is unsuitable, the Commissioner approves a suitable person.
s. 98
data_protection.processor_controls
Where the Commissioner suspects a controller or processor of non-compliance or an offence under the 2018 Act, the Commissioner may by written interview notice require an individual who is, was employed by, or was concerned in the management of that controller or processor to attend a place and answer questions. It is an offence to knowingly or recklessly make a false statement in response to an interview notice. Notice requirements are suspended pending appeal unless urgent attendance is required on at least 24 hours' notice.
s. 100
data_protection.processor_controls
A data subject may complain to a controller regarding alleged infringements of the UK GDPR or Part 3 of the 2018 Act. The controller must facilitate complaints (including providing electronic forms), acknowledge receipt within 30 days of receipt, take appropriate steps to respond without undue delay (including making enquiries and informing about progress), and inform the complainant of the outcome. The Secretary of State may make regulations requiring controllers to report complaint numbers to the Commissioner.
s. 103
data_protection.processor_controls
Schedule 2 to the EITSET Regulations 2016 is amended to apply Data Protection Act 2018 enforcement provisions to trust service providers. This applies section 146A (assessment notices requiring an approved person to prepare a report) and sections 148A, 148B, and 148C (interview notices and false statement offences) to trust service providers in respect of failures to comply with eIDAS requirements or specified statutory offences.
s. 105
trust_framework.dvs_certification
A relevant enactment or rule of law imposing a duty or conferring a power to process personal data does not override a requirement, prohibition, or restriction under the main data protection legislation, though such a duty or power may be taken into account for determining if an exception applies. The relationship between pre-commencement enactments and the main data protection legislation is not altered by the removal of EU law supremacy under the European Union (Withdrawal) Act 2018.
s. 106
data_protection.processor_controls
Under inserted regulation 32A of the PEC Regulations, the Commissioner must encourage representative bodies to produce codes of conduct to contribute to compliance and submit them in draft. Where submitted, the Commissioner must give an opinion, decide whether to approve, and if approved, register and publish the code. Approval requires a compliance monitoring mechanism, which for persons other than public bodies must involve an accredited body under regulation 32B. Under regulation 32B, the Commissioner may accredit a monitoring body satisfying independence, expertise, complaint handling, conflict of interest, and assessment standards. An accredited body must take appropriate action for infringements, and inform the Commissioner if suspending or excluding a person.
s. 116
data_protection.processor_controlsevidence.audit_trail
Under inserted section 154A(1), the Secretary of State may by regulations require providers of regulated services to provide information for purposes related to independent research into online safety matters. Regulations under section 154A(2) may govern applications, procedures, criteria, researcher access notices, formats, handling safeguards, fees, and enforcement. Under section 154A(3), enforcement provision may include investigations, reports, entry, inspection, audit powers, monetary penalties, and criminal offences not exceeding section 113 limits. Regulations cannot require personal data processing contravening data protection legislation or disclosure of material subject to legal professional privilege or confidentiality of communications under section 154A(6). Section 154A(7) requires consultation with OFCOM, the Information Commissioner, and industry and researcher representatives before making regulations.
s. 125
retention.archive
Under inserted Article 45A, the Secretary of State may by regulations approve transfers of personal data to a third country or international organisation. Regulations may only be made if the Secretary of State considers that the data protection test in Article 45B is met. Under Article 45B, the data protection test is met if the standard of protection provided for data subjects regarding general processing is not materially lower than that provided by or under the UK GDPR, Part 2 of the Data Protection Act 2018, and Parts 5 to 7 of that Act so far as relevant. The Secretary of State must consider rule of law, human rights, enforcement authority powers, redress, onward transfers, international obligations, and constitution, traditions and culture.
Sch. 7 para. 4
data_protection.processor_controls
Under inserted Article 46(1A), a transfer of personal data to a third country or an international organisation by a controller or processor is made subject to appropriate safeguards only if safeguards are provided under paragraph 2 or 3 or regulations under Article 47A(4), and the controller or processor, acting reasonably and proportionately, considers that the data protection test is met; or if safeguards are provided under paragraph 2(a) by an instrument and each public body party to it, acting reasonably and proportionately, considers the test met. Under paragraph 6, the test is met if the standard of protection provided for the data subject after transfer by the safeguards and other means would not be materially lower than under UK GDPR, Part 2 of the 2018 Act, and relevant Parts 5 to 7.
Sch. 7 para. 6
data_protection.processor_controlssharing.secure
Under inserted section 74AA, the Secretary of State may by regulations approve transfers of personal data to a third country or international organisation only if the data protection test under section 74AB is met. The test is met if the standard of protection provided for data subjects regarding law enforcement processing is not materially lower than the standard provided under Part 3 and relevant Parts 5 to 7. The Secretary of State must consider rule of law, human rights, supervisory authorities, redress, onward transfer rules, international obligations, and culture.
Sch. 8 para. 4
data_protection.processor_controls
The Secretary of State may issue a written notice under (1) of section 251ZB to a relevant IT provider suspected of non-compliance with an applicable information standard, identifying the standard and grounds, asking for compliance and evidence within a period of at least 28 days under (2), and optionally specifying remedial steps. Under (1) of section 251ZC, the Secretary of State may publish a censure statement after providing the proposed statement under (3)(a), giving an opportunity to make representations under (3)(b), and informing the provider before publication under (4). Under (1) and (2) of section 251ZD, the Secretary of State may direct public bodies or arrange for prescribed persons to exercise compliance functions. Under (1) of section 251ZE, regulations may establish an accreditation scheme for IT and IT services.
Sch. 15 para. 8
data_protection.processor_controlsevidence.audit_trail

Part summaries

0 of 0 parts have a verified summary.

L1 unavailable for current verification: the overall summary needs every part verified. Provisions and the verified summaries remain readable.

Verification findings (338)

synthesis coverage: missing/unverified L2 part-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-16

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-17

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-18

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-19

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-20

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-21

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-22

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-23

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-24

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-25

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-26

synthesis coverage: missing/unverified L2 part-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-27

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-28

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-29

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-30

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-31

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-32

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-33

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-34

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-35

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-36

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-37

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-38

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-39

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-40

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-41

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-42

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-43

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-44

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-45

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-46

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-47

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-48

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-49

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-50

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-51

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-52

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-53

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-54

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-55

synthesis coverage: missing/unverified L2 part-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-56

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-57

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-58

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-59

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-60

synthesis coverage: missing/unverified L2 part-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-61

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-62

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-63

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-64

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-65

synthesis coverage: missing/unverified L2 part-5-chapter-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-66

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-67

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-68

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-69

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-70

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-71

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-72

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-73

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-74

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-75

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-76

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-77

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-78

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-79

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-80

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-81

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-82

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-83

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-84

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-85

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-86

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-87

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-88

synthesis coverage: missing/unverified L2 part-5-chapter-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-89

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-90

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-91

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-92

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-93

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-94

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-95

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-96

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-97

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-98

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-99

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-100

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-101

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-102

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-103

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-104

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-105

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-106

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-107

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-108

synthesis coverage: missing/unverified L2 part-5-chapter-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-109

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-110

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-111

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-112

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-113

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-114

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-115

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-116

synthesis coverage: missing/unverified L2 part-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-117

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-118

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-119

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-120

synthesis coverage: missing/unverified L2 part-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-121

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-122

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-123

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-124

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-125

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-126

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-127

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-128

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-129

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-130

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-131

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-132

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-133

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-134

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-135

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-136

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-137

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-138

synthesis coverage: missing/unverified L2 part-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-139

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-140

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-141

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-142

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-143

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-144

synthesis coverage: missing/unverified L2 schedule-3-part-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-16

synthesis coverage: missing/unverified L2 schedule-3-part-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-17

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-18

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-19

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-20

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-21

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-22

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-23

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-24

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-25

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-26

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-27

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-28

synthesis coverage: missing/unverified L2 schedule-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-16

synthesis coverage: missing/unverified L2 schedule-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-10

synthesis coverage: missing/unverified L2 schedule-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-10

synthesis coverage: missing/unverified L2 schedule-9-part-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-16

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-17

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-18

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-19

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-20

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-21

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-22

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-23

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-24

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-25

synthesis coverage: missing/unverified L2 schedule-9-part-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-26

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-27

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-28

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-29

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-30

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-31

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-32

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-33

synthesis coverage: missing/unverified L2 schedule-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-16

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-17

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-18

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-19

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-20

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-21

synthesis coverage: missing/unverified L2 schedule-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-16

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-17

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-18

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-19

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-20

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-21

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-22

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-23

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-24

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-25

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-26

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-27

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-28

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-29

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-30

synthesis coverage: missing/unverified L2 schedule-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-31

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-32

synthesis coverage: missing/unverified L2 schedule-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-14-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-14-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-14-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-14-paragraph-4

synthesis coverage: missing/unverified L2 schedule-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-8

synthesis coverage: missing/unverified L2 schedule-16-part-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-4

synthesis coverage: missing/unverified L2 schedule-16-part-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-7

Instrument tier unavailable

Change history as published

No captured publisher history.

Pending effects amendments not yet applied to this text

s. 103(2) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(2)para. 28(3)(g)(i) · Effective date unknown · s. 103

s. 103(3) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(2)para. 28(3)(g)(ii) · Effective date unknown · s. 103

s. 103(5) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(2)para. 28(3)(g)(iii) · Effective date unknown · s. 103

s. 103(6) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(2)para. 28(3)(g)(iv) · Effective date unknown · s. 103

Sch. 10 para. 2 word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(a) · Effective date unknown · Sch. 10 para. 2

Show all 19

Sch. 10 para. 3(3) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(b) · Effective date unknown · Sch. 10 para. 3

Sch. 10 para. 4(3) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(c) · Effective date unknown · Sch. 10 para. 4

Sch. 10 para. 5(3) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(d) · Effective date unknown · Sch. 10 para. 5

Sch. 10 para. 6 word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(e) · Effective date unknown · Sch. 10 para. 6

Sch. 10 para. 7(3) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(f) · Effective date unknown · Sch. 10 para. 7

Sch. 10 para. 10(2)(b) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(g) · Effective date unknown · Sch. 10 para. 10

Sch. 10 para. 10(3)(b) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(g) · Effective date unknown · Sch. 10 para. 10

Sch. 10 para. 11(2)(b) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(h) · Effective date unknown · Sch. 10 para. 11

Sch. 10 para. 13(2)(b) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(i) · Effective date unknown · Sch. 10 para. 13

Sch. 10 para. 13(3)(b) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(i) · Effective date unknown · Sch. 10 para. 13

Sch. 10 para. 14 word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(j) · Effective date unknown · Sch. 10 para. 14

Sch. 10 para. 15 word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(k) · Effective date unknown · Sch. 10 para. 15

Sch. 10 para. 19 word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(l) · Effective date unknown · Sch. 10 para. 19

Sch. 10 para. 20(2) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(m) · Effective date unknown · Sch. 10 para. 20

Full TOC · table of contents Expand all parts

22 parts · 313 provisions. Open a provision for its text and, where available, its one-line summary.

Part 1 Access to customer data and business data · 26 provisions
1 Customer data and business data
2 Power to make provision in connection with customer data
3 Customer data: supplementary
4 Power to make provision in connection with business data
5 Business data: supplementary
6 Decision-makers
7 Interface bodies
8 Enforcement of regulations under this Part
9 Restrictions on powers of investigation etc
10 Financial penalties
11 Fees
12 Levy
13 Financial assistance
14 The FCA and financial services interfaces
15 The FCA and financial services interfaces: supplementary
16 The FCA and financial services interfaces: penalties and levies
17 The FCA and co-ordination with other regulators
18 Liability in damages
19 Duty to review regulations
20 Restrictions on processing and data protection
21 Regulations under this Part: supplementary
22 Regulations under this Part: Parliamentary procedure and consultation
23 Related subordinate legislation
24 Repeal of provisions relating to supply of customer data
25 Other defined terms
26 Index of defined terms for this Part
Part 2 Digital verification services · 29 provisions
27 Introductory
28 DVS trust framework
29 Supplementary codes
30 Withdrawal of a supplementary code
31 Review of DVS trust framework and supplementary codes
32 DVS register
33 Registration in the DVS register
34 Power to refuse registration in the DVS register
35 Registration of additional services
36 Supplementary notes
37 Addition of services to supplementary notes
38 Applications for registration, supplementary notes, etc
39 Fees for applications for registration, supplementary notes, etc
40 Duty to remove person from the DVS register
41 Power to remove person from the DVS register
42 Duty to remove services from the DVS register
43 Duty to remove supplementary notes from the DVS register
44 Duty to remove services from supplementary notes
45 Power of public authority to disclose information to registered person
46 Information disclosed by the Revenue and Customs
47 Information disclosed by the Welsh Revenue Authority
48 Information disclosed by Revenue Scotland
49 Code of practice about the disclosure of information
50 Trust mark for use by registered persons
51 Power of Secretary of State to require information
52 Arrangements for third party to exercise functions
53 Report on the operation of this Part
54 Index of defined terms for this Part
55 Powers relating to verification of identity or status
Part 3 National Underground Asset Register · 5 provisions
56 National Underground Asset Register: England and Wales
57 Information in relation to apparatus: England and Wales
58 National Underground Asset Register: Northern Ireland
59 Information in relation to apparatus: Northern Ireland
60 Pre-commencement consultation
Part 4 Registers of births and deaths · 5 provisions
61 Form in which registers of births and deaths are to be kept
62 Provision of equipment and facilities by local authorities
63 Requirements to sign register
64 Treatment of existing registers and records
65 Minor and consequential amendments
Chapter 1 Data protection · 43 provisions
66 The 2018 Act and the UK GDPR
67 Meaning of research and statistical purposes
68 Consent to processing for the purposes of scientific research
69 Consent to law enforcement processing
70 Lawfulness of processing
71 The purpose limitation
72 Processing in reliance on relevant international law
73 Elected representatives responding to requests
74 Processing of special categories of personal data
75 Fees and reasons for responses to data subjects’ requests about law enforcement processing
76 Time limits for responding to data subjects’ requests
77 Information to be provided to data subjects
78 Searches in response to data subjects’ requests
79 Data subjects’ rights to information: legal professional privilege exemption
80 Automated decision-making
81 Data protection by design: children’s higher protection matters
82 Logging of law enforcement processing
83 General processing and codes of conduct
84 Law enforcement processing and codes of conduct
85 Transfers of personal data to third countries and international organisations
86 Safeguards for processing for research etc purposes
87 Section 86: consequential provision
88 National security exemption
89 Joint processing by intelligence services and competent authorities
90 Joint processing: consequential amendments
91 Duties of the Commission in carrying out functions
92 Codes of practice for the processing of personal data
93 Codes of practice: panels and impact assessments
94 Manifestly unfounded or excessive requests to the Commissioner
95 Analysis of performance
96 Notices from the Commissioner
97 Power of the Commissioner to require documents
98 Power of the Commissioner to require a report
99 Assessment notices: removal of OFSTED restriction
100 Interview notices
101 Penalty notices
102 Annual report on regulatory action
103 Complaints by data subjects
104 Court procedure in connection with subject access requests
105 Consequential amendments to the EITSET Regulations
106 Protection of prohibitions, restrictions and data subject’s rights
107 Regulations under the UK GDPR
108 Further minor provision about data protection
Chapter 2 Privacy and electronic communications · 8 provisions
109 The PEC Regulations
110 Interpretation of the PEC Regulations
111 Duty to notify the Commissioner of personal data breach: time periods
112 Storing information in the terminal equipment of a subscriber or user
113 Emergency alerts: interpretation of time periods
114 Use of electronic mail for direct marketing by charities
115 Commissioner’s enforcement powers
116 Codes of conduct
Part 6 The Information Commission · 4 provisions
117 The Information Commission
118 Abolition of the office of Information Commissioner
119 Transfer of functions to the Information Commission
120 Transfer of property etc to the Information Commission
Part 7 Other provision about use of, or access to, data · 18 provisions
121 Information standards for health and adult social care in England
122 Grant of smart meter communication licences
123 Disclosure of information to improve public service delivery to undertakings
124 Retention of information by providers of internet services in connection with death of child
125 Information for research about online safety matters
126 Retention of biometric data and recordable offences
127 Retention of pseudonymised biometric data
128 Retention of biometric data from INTERPOL
129 The eIDAS Regulation
130 Recognition of EU conformity assessment bodies
131 Removal of recognition of EU standards etc
132 Recognition of overseas trust products
133 Co-operation between supervisory authority and overseas authorities
134 Time periods: the eIDAS Regulation and the EITSET Regulations
135 Economic impact assessment
136 Report on the use of copyright works in the development of AI systems
137 Progress statement
138 Creating, or requesting the creation of, purported intimate image of adult
Part 8 Final provisions · 6 provisions
139 Power to make consequential amendments
140 Regulations
141 Extent
142 Commencement
143 Transitional, transitory and saving provision
144 Short title
Part 1 Amendments of the Births and Deaths Registration Act 1953 · 16 provisions
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Part 2 Amendments of other legislation · 12 provisions
17 Registration Service Act 1953
18 Registration Service Act 1953
19 Registration Service Act 1953
20 Registration Service Act 1953
21 Public Records Act 1958
22 Social Security Administration Act 1992
23 Education Act 1996
24 Adoption and Children Act 2002
25 Gender Recognition Act 2004
26 Gender Recognition Act 2004
27 Gender Recognition Act 2004
28 Presumption of Death Act 2013
Schedule 6 · 16 provisions
1 The UK GDPR
2
3
4
5
6
7
8
9
10 The 2018 Act
11
12
13
14
15
16
Schedule 7 · 10 provisions
1 Introduction
2 General principles for transfers
3 Transfers approved by regulations
4
5 Transfers approved by regulations: monitoring
6 Transfers subject to appropriate safeguards
7
8
9 Derogations for specific situations
10 Public interest restrictions
Schedule 8 · 10 provisions
1 Introduction
2 Overview and interpretation
3 General principles for transfer
4 Transfers approved by regulations
5 Transfers approved by regulations: monitoring
6 Transfers subject to appropriate safeguards
7 Transfers based on special circumstances
8 Transfers to particular recipients
9
10 Subsequent transfers
Part 1 Minor and consequential amendments · 25 provisions
1 The UK GDPR
2
3
4
5
6
7
8
9
10
11 The 2018 Act
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Part 2 Transitional provision · 8 provisions
26 The UK GDPR: transfers approved by regulations
27 The UK GDPR: transfers subject to appropriate safeguards
28 The UK GDPR: transfers subject to appropriate safeguards provided by standard data protection clauses
29
30 The UK GDPR: transfers necessary for important reasons of public interest
31 The UK GDPR: restrictions on transfers of personal data to third countries and international organisations
32 Part 3 of the 2018 Act (law enforcement processing): transfers approved by regulations
33 Part 3 of the 2018 Act (law enforcement processing): transfers subject to appropriate safeguards
Schedule 10 · 21 provisions
1 The UK GDPR
2 The UK GDPR
3 The UK GDPR
4 The UK GDPR
5 The UK GDPR
6 The UK GDPR
7 The UK GDPR
8 The 2018 Act
9 The 2018 Act
10 The 2018 Act
11 The 2018 Act
12 The 2018 Act
13 The 2018 Act
14 The 2018 Act
15 The 2018 Act
16 The 2018 Act
17 The 2018 Act
18 The 2018 Act
19 The 2018 Act
20 The 2018 Act
21 The 2018 Act
Schedule 11 · 32 provisions
1 The UK GDPR
2 The UK GDPR
3 The UK GDPR
4 The UK GDPR
5 The UK GDPR
6 The UK GDPR
7 The UK GDPR
8 The UK GDPR
9 The UK GDPR
10 The UK GDPR
11 The UK GDPR
12 The UK GDPR
13 The 2018 Act
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32 Victims and Prisoners Act 2024
Schedule 14 · 4 provisions
1 Schedule 12A to the Data Protection Act 2018
2 Transitional provision: first chair
3 Transitional provision: consultation about non-executive members
4 Transitional provision: consultation about interim chief executive
Schedule 15 · 8 provisions
1
2
3
4
5
6
7
8
Part 1 Amendments of the Energy Act 2008 · 4 provisions
1
2
3
4
Part 2 Amendments of other legislation · 3 provisions
5 Gas Act 1986
6 Electricity Act 1989
7 Electricity and Gas (Competitive Tenders for Smart Meter Communication Licences) Regulations 2012

Impact profile

Transportation
2
Banking finance
2
Public sector health
2
Energy, utilities & telco
2
Insurance pensions
2
Services
2
Media entertainment
2
Manufacturing construction
2
Commerce
2

Dimensions

Mechanism strength
3
Signicat obligation
2
Urgency
Pending

Penalties

Fines not exceeding level 4 on the standard scale under s. 57, level 5 on the standard scale under s. 58, and the standard maximum amount under Sch. 10 para. 18.

Definitions

direct marketing
“the communication (by whatever means) of advertising or marketing material which is directed to particular individuals”
s. 110
the Periods of Time Regulation
“Regulation (EEC, Euratom) No. 1182/71 of the Council of 3 June 1971 determining the rules applicable to periods, dates and time limits.”
s. 110

References

uk:eur/2008/765 (unregistered reference)

uk:eur/2014/910

uk:eur/2016/679

uk:ukpga/2018/12

uk:ukpga/2023/50

uk:uksi/2003/2426

uk:uksi/2016/696