Watchtower/Law library/Data (Use and Access) Act 2025
As last captured

legislation

Data (Use and Access) Act 2025

Data (Use and Access) Act 2025 establishes the DVS register under s. 32, governs underground asset data duties for undertakers under s. 56, and binds controllers to handle subject complaints under s. 103.

Verified at publication, 2026-11-12 11:12 UTC

313 provisions in 22 parts · official text ↗

trbfpseuipsvmemccm
impact by vertical

Summary

What this law does

Establishes a statutory framework for digital verification services including the DVS trust framework and register, provides for customer and business data sharing schemes, creates the National Underground Asset Register, reforms civil registration of births and deaths, transitions the Information Commissioner to the Information Commission, and amends the UK GDPR and Data Protection Act 2018 regarding research, automated decision-making, international transfers, and complaint handling.

Why it matters to Signicat and its customers

No Signicat-specific relevance narrative is stored for this instrument; the stored applicability is shown below.

Who is bound: controllers; processors; undertakers having apparatus in a street; relevant person executing works of any description in a street; accredited conformity assessment body; person registered in the DVS register; provider of a public electronic communications service; relevant IT provider; providers of regulated services; Secretary of State · Regulators: Information Commission; Secretary of State; Financial Conduct Authority; OFCOM; Registrar General

Transportation
Imposes reporting and data verification duties under the National Underground Asset Register when executing street works.
Banking Finance
Enables FCA customer and business data-sharing interface regulations and mandates updated data protection complaint handling.
Public Sector Health
Requires public authorities to follow digital verification rules, digitalises civil registers, and sets health IT provider standards.
Energy Utility Telco
Mandates utility apparatus data uploads to the National Underground Asset Register and reforms electronic communications rules.
Insurance Pensions
Governs international personal data transfers and establishes mandatory data subject complaint-handling procedures for controllers.
Services
Enables digital verification services for right to work and rent checks and reforms data subject complaint handling.
Media Entertainment
Requires regulated online services to retain deceased child user data upon receiving OFCOM information retention notices.
Manufacturing Construction
Applies right to work verification frameworks and requires apparatus reporting during construction and street works in NUAR.
Commerce
Regulates direct marketing communications, terminal equipment data storage, and mandatory direct complaint-handling channels.

Key obligations each linked to the provision it comes from

Under (1), the Secretary of State may refuse to register a person in the DVS register on national security grounds under (1)(a) or for failure to comply with the DVS trust framework under (1)(b). Prior written notice stating reasons and representation rights is required under (2) and (3). The Secretary of State must consider representations under (7). Notice of refusal may bar further applications for up to two years under (8), (9), and (11). Under (10), the Secretary of State must refuse any application made during that barred period.
s. 34
trust_framework.dvs_certification
Under (1), the Secretary of State may remove a person from the DVS register for non-compliance with the DVS trust framework under (1)(a), non-compliance with a supplementary code under (1)(b), failure to provide information under section 51 under (1)(c), or national security under (1)(d). Under (2) and (3), prior written notice of intention and reasons must be given, allowing at least 21 days under (5) for written representations. Oral representations may be arranged under (6), and representations must be considered under (7). Notice of removal under (8) may specify an application refusal period up to two years under (9) and (11), which requires mandatory refusal of re-registration applications under (10).
s. 41
trust_framework.dvs_certification
Under (1), the Secretary of State may by written notice require an accredited conformity assessment body or a person registered in the DVS register to provide information reasonably required for exercising Part 2 functions. The notice must state reasons under (2) and consequences under section 41 of failure to comply under (4). Disclosures required do not breach obligations of confidence or disclosure restrictions under (6).
s. 51
trust_framework.dvs_certificationevidence.audit_trail
Under (1), amends section 15 of the Immigration, Asylum and Nationality Act 2006 to allow orders to specify documents generated by, documents provided to, or steps involving the use of services provided by a DVS-registered person or a DVS-registered person of a specified description. Under (2), amends section 34 of the Immigration Act 2014 to enable residential tenancy orders to prescribe documents and checks involving DVS-registered persons. Under (3), amends Schedule 6 to the Immigration Act 2016 to enable illegal working compliance orders to prescribe checks and documents involving DVS-registered persons.
s. 55
checks.right_to_workchecks.right_to_renttrust_framework.dvs_certificationevidence.audit_trail
Under UK GDPR Article 12, a controller must respond before the end of the applicable time period, defined in Article 12A as one month from the latest of receiving the request, receiving requested identity information under Article 12(6), or payment of any charged fee. Under Article 12(6)(b), a controller may delay dealing with the request until the data subject's identity is confirmed. The period may be extended by two further months by notice stating reasons given within one month if necessary due to complexity or number of requests. Under Article 12A(5) and 2018 Act sections 54 and 94, where further information is reasonably required to identify requested processing, time is paused until received.
s. 76
data_protection.processor_controlsidentity_proofing.data_verification
Where an investigating authority notifies OFCOM of an investigation into a child's death with specified details, OFCOM must give notice under s.101(C1)(a) to a provider of a service within s.101(E1) to retain information relating to the child's service use, and may give notice under s.101(C1)(b) to any other relevant person. Notice recipients must take all reasonable steps without delay to prevent deletion by routine systems under s.101(D1), retain information for one year under s.102(5A)(c) (extendable under s.102(5B) by up to six months), and notify OFCOM by specified dates under s.102(5A)(d). Intentionally deleting or altering retained information to obstruct official investigations is an offence under s.109(6A), with senior manager liability under s.110(6A). Notices cannot require processing contravening data protection legislation under s.100(8A) and s.101(5A).
s. 124
retention.archiveevidence.audit_trail
Inserts Articles 45A, 45B, and 45C into the eIDAS Regulation. Article 45A empowers the Secretary of State by regulations to provide that specified overseas trust products (electronic signatures, seals, time stamps, or registered delivery services provided outside the UK) are treated as qualified for Articles 25(2), 35(2), 41(2), and 43(2). Article 45B allows regulations treating specified overseas electronic signatures or seals as compliant advanced or qualified signatures or seals for public sector body recognition under Articles 27 and 37. Under Articles 45A(3) and 45B(4), the Secretary of State may only make such regulations if satisfied that the reliability of the overseas product is at least equivalent to comparable qualified UK trust products or specified signature/seal standards, having regard to foreign law and related trust services. Article 45C mandates prior consultation with the supervisory body.
s. 132
signing.aessigning.qestimestamping.qualifiedtrust_framework.dvs_certification
Under section 3, regulations may include provision about authorisation procedures for customers, conditions for authorisation, and decision-maker evaluations. Regulations may require data holders, customers, or third party recipients to use specified facilities or services including dashboard services, electronic communications services, or application programming interfaces under subsection (4)(b), comply with specified standards under subsection (4)(c), and provide assistance. Under subsection (5), regulations may require data holders and third party recipients to produce, collect, or retain records of customer data provided or received. Regulations may also govern complaints and dispute resolution procedures.
s. 3
sharing.secureretention.archiveevidence.audit_trail
Section 4 empowers the Secretary of State or the Treasury under subsection (1) to make regulations requiring a data holder to publish business data or provide it to a customer or specified description of person. Under subsection (3), regulations may enable or require a data holder to produce, collect, or retain business data. Subsection (4) enables regulations requiring public authority third party recipients, or their appointed persons, to publish or provide business data, applying provisions of sections 5 to 21 other than imposing a levy.
s. 4
sharing.secureretention.archive
Regulations under section 4 may require business data to be provided on request and govern refusal circumstances under subsection (2). Regulations may restrict recipients to approved persons complying with conditions determined by decision-makers under subsection (3). Subsection (4) permits requiring data holders, customers, or third party recipients to use specified facilities or services like dashboard services or APIs, comply with standards, and provide assistance. Under subsection (5), regulations may require data holders and third party recipients to produce, collect, or retain records of business data.
s. 5
sharing.secureretention.archiveevidence.audit_trail
Section 6 applies to regulations about decision-makers authorised or required to take decisions regarding authorisation under section 3(2)(c) or approval under section 5(3)(b). Regulations may govern their appointment, suspension, or revocation of decisions, and confer monitoring powers under subsection (5) to assess compliance with conditions, including requiring documents or information under subsection (6). Regulations must provide for reviews and appeals for affected persons under subsection (7).
s. 6
evidence.audit_trailkyb.company_verification
Section 7 applies to interface bodies tasked with establishing, standard-setting, maintaining, or managing interfaces used for processing customer data or business data. Under subsection (3), regulations may require data holders or third party recipients to set up an interface body. Under subsection (4), regulations may govern governance, assistance, operational requirements, complaints, reviews, and monitoring powers to oversee interface and standard use, including requiring documents or information under subsection (5).
s. 7
sharing.secureevidence.audit_trail
The Secretary of State or the Treasury may make regulations for monitoring compliance and enforcement by a specified public authority (an enforcer) under subsection (1). Regulations may confer investigative powers under subsection (4), including requiring documents or information, attendance to answer questions, and powers of entry, search, and seizure. Regulations may authorise compliance notices under subsection (5), create criminal offences for false information or obstruction under subsection (6), and enable financial penalties under subsection (7).
s. 8
evidence.audit_trail
Under subsection (1), regulations may not authorise entry to a private dwelling without a justice's warrant, nor require provision of protected information to a decision-maker, interface body, or enforcer. Protected information includes House of Parliament privileged material under subsection (2), confidential communications with professional legal advisers for legal advice on Part 1 regulations under subsection (3), or contemplated legal proceedings under subsection (4). Under subsection (6), persons cannot be required to provide information exposing them to criminal prosecution.
s. 9
evidence.audit_trail
Section 11 empowers the Secretary of State or the Treasury to make regulations enabling data holders, decision-makers, interface bodies, enforcers, or other duty-bearers to charge fees for performing statutory duties or exercising powers under Part 1. Fees may only be payable by persons capable of being directly affected under subsection (4)(a), and may be intended to exceed the cost of the activities under subsection (4)(b). Regulations must specify the fee amount, determination method, or maximum cap under subsection (5), and require published fee information under subsection (7).
s. 11
The Treasury may make regulations enabling or requiring the FCA to make rules requiring financial services providers, third-party data recipients, or section 2(4) actors to use a prescribed interface, comply with interface standards, or participate in interface arrangements under subsection (1). Subsection (6) enables regulations allowing the FCA to impose additional requirements in response to compliance failures or to advance specified statutory purposes. Section 9 investigative restrictions apply to FCA interface rules and additional requirements under subsection (8).
s. 14
sharing.secureevidence.audit_trail
Under inserted section 106A, the Secretary of State must keep NUAR relating to apparatus in streets in England and Wales and enable access for mandated uploaders. Inserted section 106B requires an undertaker having apparatus in a street to enter into NUAR, before the end of the initial upload period, all information in records under section 79(1) on the archive upload date and other prescribed information. Under section 106E, undertakers may be required to pay fees to cover combined NUAR expenses, and under section 106F to provide related fee-determination information. Inserted section 106H permits third-party exercise of relevant functions.
s. 56
sharing.secureretention.archiveevidence.audit_traildata_protection.processor_controls
Under inserted section 79(3B), where an undertaker records information under subsection (1) or (1B) or updates it, the undertaker must, within a prescribed period, enter the information into NUAR. Under inserted section 80, a relevant person executing works in a street who finds unrecorded or incorrect apparatus must take reasonably practicable steps to inform the undertaker, or enter prescribed information into NUAR if unable to inform the undertaker.
s. 57
sharing.secureretention.archiveevidence.audit_trail
Under inserted Article 45A, the Secretary of State must keep NUAR relating to apparatus in streets in Northern Ireland, which may be kept jointly with England and Wales. Under inserted Article 45B, an undertaker having apparatus in a street must enter archive records and prescribed information into NUAR before the end of the initial upload period. Under Article 45E, undertakers may be required to pay fees to match combined NUAR expenses, and under Article 45F to furnish information to ascertain fees.
s. 58
sharing.secureretention.archiveevidence.audit_traildata_protection.processor_controls
Under inserted Article 39(3B), where an undertaker records information under paragraph (1) or (1B) or updates it, the undertaker must, within a prescribed period, enter the information into NUAR. Under inserted Article 40, a relevant person executing works in a street who finds unrecorded or incorrect apparatus must take reasonably practicable steps to inform the undertaker, or enter prescribed information into NUAR if unable to inform the undertaker.
s. 59
sharing.secureretention.archiveevidence.audit_trail
The repeal of section 28 of the Births and Deaths Registration Act 1953 preserves record-keeping duties under section 28(2) and (4). Registrars must deliver unfilled registers of live-births or deaths to the superintendent registrar, and forward unfilled still-birth registers to the Registrar General. Non-hard copy registers kept for a sub-district between 1 July 2009 and the coming into force of section 61 are treated as the official register under the 1953 Act; prior signatures remain valid. The Registrar General is permitted to dispose of certain certified copies and electronic quarterly return information.
s. 64
retention.archiveevidence.audit_trail
The Secretary of State may by regulations make provision adding descriptions of processing subject to Article 9(1) UK GDPR prohibition, removing added processing from it, or varying Article 9(2) exceptions for added processing. Under the 2018 Act (sections 42A and 91A), the Secretary of State may specify additional processing as sensitive processing for Part 3 or Part 4, provide that added processing is not sensitive processing, and vary reliance on protected conditions in Schedules 8 and 10. Under section 202A of the Investigatory Powers Act 2016, regulations may specify descriptions of Part 4 sensitive processing that constitute sensitive processing for bulk personal datasets under section 202.
s. 74
data_protection.processor_controls
Under section 45A of the 2018 Act, sections 44(2) and 45(1) do not require a controller to give information subject to legal professional privilege, confidentiality of communications in Scotland, or a legal adviser's duty of confidentiality to a client. A controller relying on the exemption must record the reason, provide it to the Commissioner on request, and inform the data subject in writing without undue delay of the decision, reasons, and rights to complain to the Commissioner or apply to court under section 167.
s. 79
data_protection.processor_controls
Adherence to a code of conduct approved under section 71A of the 2018 Act may be used by a controller or processor to demonstrate compliance with Part 3 general obligations, security of processing under section 66(1), or sufficient processor guarantees under section 59(2). The Commissioner must encourage expert public bodies to produce and submit draft codes of conduct taking account of sector-specific features. If submitted, the Commissioner must provide an opinion, decide whether to approve, and if approved, register and publish the code.
s. 84
data_protection.processor_controls
Under Chapter 8A of the UK GDPR (Articles 84A to 84D), personal data may only be processed for RAS purposes (scientific or historical research, public interest archiving, or statistical purposes) if it consists of collection, is carried out to convert data into non-identifying information, or the purposes cannot otherwise be fulfilled. Processing must be subject to appropriate safeguards respecting data minimisation (such as pseudonymisation). Safeguards are not satisfied if processing is likely to cause substantial damage or distress, or is carried out for measures or decisions regarding a particular data subject (except approved medical research). The Secretary of State may make further regulations regarding safeguards.
s. 86
data_protection.processor_controls
Under section 78A of the 2018 Act, specified provisions of Part 3 (including principles, data subject rights, breach notifications, international transfers, and enforcement powers) do not apply to personal data processed for law enforcement purposes if exemption is required for safeguarding national security. Certain core provisions remain excepted from the exemption, including lawful processing obligations under section 35(1) and sensitive processing safeguards. Under section 79, a certificate signed by a Minister of the Crown certifying that exemption is or was required is conclusive evidence of that fact.
s. 88
data_protection.processor_controls
The Commissioner may give an assessment notice requiring a controller or processor to arrange for an approved person to prepare a report on a specified matter and provide it to the Commissioner. The notice may specify terms regarding preparation, contents, form, and completion date. The controller or processor must nominate a person within the specified period, pay their remuneration and expenses, and provide all reasonable assistance. If no nomination is made or the nominated person is unsuitable, the Commissioner approves a suitable person.
s. 98
data_protection.processor_controls
Where the Commissioner suspects a controller or processor of non-compliance or an offence under the 2018 Act, the Commissioner may by written interview notice require an individual who is, was employed by, or was concerned in the management of that controller or processor to attend a place and answer questions. It is an offence to knowingly or recklessly make a false statement in response to an interview notice. Notice requirements are suspended pending appeal unless urgent attendance is required on at least 24 hours' notice.
s. 100
data_protection.processor_controls
A data subject may complain to a controller regarding alleged infringements of the UK GDPR or Part 3 of the 2018 Act. The controller must facilitate complaints (including providing electronic forms), acknowledge receipt within 30 days of receipt, take appropriate steps to respond without undue delay (including making enquiries and informing about progress), and inform the complainant of the outcome. The Secretary of State may make regulations requiring controllers to report complaint numbers to the Commissioner.
s. 103
data_protection.processor_controls
Schedule 2 to the EITSET Regulations 2016 is amended to apply Data Protection Act 2018 enforcement provisions to trust service providers. This applies section 146A (assessment notices requiring an approved person to prepare a report) and sections 148A, 148B, and 148C (interview notices and false statement offences) to trust service providers in respect of failures to comply with eIDAS requirements or specified statutory offences.
s. 105
trust_framework.dvs_certification
A relevant enactment or rule of law imposing a duty or conferring a power to process personal data does not override a requirement, prohibition, or restriction under the main data protection legislation, though such a duty or power may be taken into account for determining if an exception applies. The relationship between pre-commencement enactments and the main data protection legislation is not altered by the removal of EU law supremacy under the European Union (Withdrawal) Act 2018.
s. 106
data_protection.processor_controls
Under inserted regulation 32A of the PEC Regulations, the Commissioner must encourage representative bodies to produce codes of conduct to contribute to compliance and submit them in draft. Where submitted, the Commissioner must give an opinion, decide whether to approve, and if approved, register and publish the code. Approval requires a compliance monitoring mechanism, which for persons other than public bodies must involve an accredited body under regulation 32B. Under regulation 32B, the Commissioner may accredit a monitoring body satisfying independence, expertise, complaint handling, conflict of interest, and assessment standards. An accredited body must take appropriate action for infringements, and inform the Commissioner if suspending or excluding a person.
s. 116
data_protection.processor_controlsevidence.audit_trail
Under inserted section 154A(1), the Secretary of State may by regulations require providers of regulated services to provide information for purposes related to independent research into online safety matters. Regulations under section 154A(2) may govern applications, procedures, criteria, researcher access notices, formats, handling safeguards, fees, and enforcement. Under section 154A(3), enforcement provision may include investigations, reports, entry, inspection, audit powers, monetary penalties, and criminal offences not exceeding section 113 limits. Regulations cannot require personal data processing contravening data protection legislation or disclosure of material subject to legal professional privilege or confidentiality of communications under section 154A(6). Section 154A(7) requires consultation with OFCOM, the Information Commissioner, and industry and researcher representatives before making regulations.
s. 125
retention.archive
Under inserted Article 45A, the Secretary of State may by regulations approve transfers of personal data to a third country or international organisation. Regulations may only be made if the Secretary of State considers that the data protection test in Article 45B is met. Under Article 45B, the data protection test is met if the standard of protection provided for data subjects regarding general processing is not materially lower than that provided by or under the UK GDPR, Part 2 of the Data Protection Act 2018, and Parts 5 to 7 of that Act so far as relevant. The Secretary of State must consider rule of law, human rights, enforcement authority powers, redress, onward transfers, international obligations, and constitution, traditions and culture.
Sch. 7 para. 4
data_protection.processor_controls
Under inserted Article 46(1A), a transfer of personal data to a third country or an international organisation by a controller or processor is made subject to appropriate safeguards only if safeguards are provided under paragraph 2 or 3 or regulations under Article 47A(4), and the controller or processor, acting reasonably and proportionately, considers that the data protection test is met; or if safeguards are provided under paragraph 2(a) by an instrument and each public body party to it, acting reasonably and proportionately, considers the test met. Under paragraph 6, the test is met if the standard of protection provided for the data subject after transfer by the safeguards and other means would not be materially lower than under UK GDPR, Part 2 of the 2018 Act, and relevant Parts 5 to 7.
Sch. 7 para. 6
data_protection.processor_controlssharing.secure
Under inserted section 74AA, the Secretary of State may by regulations approve transfers of personal data to a third country or international organisation only if the data protection test under section 74AB is met. The test is met if the standard of protection provided for data subjects regarding law enforcement processing is not materially lower than the standard provided under Part 3 and relevant Parts 5 to 7. The Secretary of State must consider rule of law, human rights, supervisory authorities, redress, onward transfer rules, international obligations, and culture.
Sch. 8 para. 4
data_protection.processor_controls
The Secretary of State may issue a written notice under (1) of section 251ZB to a relevant IT provider suspected of non-compliance with an applicable information standard, identifying the standard and grounds, asking for compliance and evidence within a period of at least 28 days under (2), and optionally specifying remedial steps. Under (1) of section 251ZC, the Secretary of State may publish a censure statement after providing the proposed statement under (3)(a), giving an opportunity to make representations under (3)(b), and informing the provider before publication under (4). Under (1) and (2) of section 251ZD, the Secretary of State may direct public bodies or arrange for prescribed persons to exercise compliance functions. Under (1) of section 251ZE, regulations may establish an accreditation scheme for IT and IT services.
Sch. 15 para. 8
data_protection.processor_controlsevidence.audit_trail

Part summaries

0 of 0 parts have a verified summary.

L1 unavailable for current verification: the overall summary needs every part verified. Provisions and the verified summaries remain readable.

Verification findings (338)

synthesis coverage: missing/unverified L2 part-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-16

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-17

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-18

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-19

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-20

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-21

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-22

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-23

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-24

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-25

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-26

synthesis coverage: missing/unverified L2 part-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-27

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-28

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-29

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-30

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-31

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-32

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-33

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-34

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-35

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-36

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-37

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-38

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-39

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-40

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-41

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-42

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-43

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-44

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-45

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-46

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-47

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-48

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-49

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-50

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-51

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-52

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-53

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-54

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-55

synthesis coverage: missing/unverified L2 part-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-56

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-57

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-58

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-59

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-60

synthesis coverage: missing/unverified L2 part-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-61

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-62

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-63

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-64

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-65

synthesis coverage: missing/unverified L2 part-5-chapter-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-66

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-67

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-68

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-69

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-70

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-71

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-72

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-73

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-74

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-75

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-76

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-77

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-78

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-79

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-80

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-81

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-82

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-83

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-84

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-85

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-86

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-87

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-88

synthesis coverage: missing/unverified L2 part-5-chapter-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-89

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-90

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-91

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-92

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-93

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-94

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-95

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-96

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-97

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-98

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-99

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-100

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-101

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-102

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-103

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-104

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-105

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-106

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-107

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-108

synthesis coverage: missing/unverified L2 part-5-chapter-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-109

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-110

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-111

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-112

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-113

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-114

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-115

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-116

synthesis coverage: missing/unverified L2 part-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-117

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-118

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-119

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-120

synthesis coverage: missing/unverified L2 part-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-121

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-122

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-123

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-124

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-125

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-126

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-127

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-128

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-129

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-130

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-131

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-132

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-133

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-134

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-135

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-136

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-137

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-138

synthesis coverage: missing/unverified L2 part-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-139

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-140

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-141

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-142

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-143

synthesis coverage: missing evaluation uk:ukpga/2025/18#section-144

synthesis coverage: missing/unverified L2 schedule-3-part-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-16

synthesis coverage: missing/unverified L2 schedule-3-part-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-17

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-18

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-19

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-20

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-21

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-22

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-23

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-24

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-25

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-26

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-27

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-3-paragraph-28

synthesis coverage: missing/unverified L2 schedule-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-6-paragraph-16

synthesis coverage: missing/unverified L2 schedule-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-7-paragraph-10

synthesis coverage: missing/unverified L2 schedule-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-8-paragraph-10

synthesis coverage: missing/unverified L2 schedule-9-part-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-16

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-17

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-18

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-19

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-20

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-21

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-22

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-23

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-24

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-25

synthesis coverage: missing/unverified L2 schedule-9-part-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-26

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-27

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-28

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-29

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-30

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-31

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-32

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-9-paragraph-33

synthesis coverage: missing/unverified L2 schedule-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-16

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-17

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-18

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-19

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-20

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-10-paragraph-21

synthesis coverage: missing/unverified L2 schedule-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-8

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-9

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-10

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-12

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-13

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-16

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-17

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-18

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-19

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-20

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-21

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-22

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-23

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-24

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-25

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-26

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-27

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-28

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-29

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-30

synthesis coverage: missing/unverified L2 schedule-11

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-31

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-11-paragraph-32

synthesis coverage: missing/unverified L2 schedule-14

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-14-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-14-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-14-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-14-paragraph-4

synthesis coverage: missing/unverified L2 schedule-15

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-4

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-7

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-15-paragraph-8

synthesis coverage: missing/unverified L2 schedule-16-part-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-1

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-3

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-4

synthesis coverage: missing/unverified L2 schedule-16-part-2

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-5

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-6

synthesis coverage: missing evaluation uk:ukpga/2025/18#schedule-16-paragraph-7

Instrument tier unavailable

Change history as published

No captured publisher history.

Pending effects amendments not yet applied to this text

s. 103(2) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(2)para. 28(3)(g)(i) · Effective date unknown · s. 103

s. 103(3) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(2)para. 28(3)(g)(ii) · Effective date unknown · s. 103

s. 103(5) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(2)para. 28(3)(g)(iii) · Effective date unknown · s. 103

s. 103(6) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(2)para. 28(3)(g)(iv) · Effective date unknown · s. 103

Sch. 10 para. 2 word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(a) · Effective date unknown · Sch. 10 para. 2

Show all 19

Sch. 10 para. 3(3) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(b) · Effective date unknown · Sch. 10 para. 3

Sch. 10 para. 4(3) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(c) · Effective date unknown · Sch. 10 para. 4

Sch. 10 para. 5(3) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(d) · Effective date unknown · Sch. 10 para. 5

Sch. 10 para. 6 word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(e) · Effective date unknown · Sch. 10 para. 6

Sch. 10 para. 7(3) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(f) · Effective date unknown · Sch. 10 para. 7

Sch. 10 para. 10(2)(b) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(g) · Effective date unknown · Sch. 10 para. 10

Sch. 10 para. 10(3)(b) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(g) · Effective date unknown · Sch. 10 para. 10

Sch. 10 para. 11(2)(b) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(h) · Effective date unknown · Sch. 10 para. 11

Sch. 10 para. 13(2)(b) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(i) · Effective date unknown · Sch. 10 para. 13

Sch. 10 para. 13(3)(b) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(i) · Effective date unknown · Sch. 10 para. 13

Sch. 10 para. 14 word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(j) · Effective date unknown · Sch. 10 para. 14

Sch. 10 para. 15 word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(k) · Effective date unknown · Sch. 10 para. 15

Sch. 10 para. 19 word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(l) · Effective date unknown · Sch. 10 para. 19

Sch. 10 para. 20(2) word substituted by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 Sch. 2 para. 28(5)(m) · Effective date unknown · Sch. 10 para. 20

Full TOC · table of contents Collapse parts

22 parts · 313 provisions. Open a provision for its text and, where available, its one-line summary.

Part 1 Access to customer data and business data · 26 provisions
1 Customer data and business data uk:ukpga/2025/18#section-1
2 Power to make provision in connection with customer data uk:ukpga/2025/18#section-2
3 Customer data: supplementary uk:ukpga/2025/18#section-3
4 Power to make provision in connection with business data uk:ukpga/2025/18#section-4
5 Business data: supplementary uk:ukpga/2025/18#section-5
6 Decision-makers uk:ukpga/2025/18#section-6
7 Interface bodies uk:ukpga/2025/18#section-7
8 Enforcement of regulations under this Part uk:ukpga/2025/18#section-8
9 Restrictions on powers of investigation etc uk:ukpga/2025/18#section-9
10 Financial penalties uk:ukpga/2025/18#section-10
11 Fees uk:ukpga/2025/18#section-11
12 Levy uk:ukpga/2025/18#section-12
13 Financial assistance uk:ukpga/2025/18#section-13
14 The FCA and financial services interfaces uk:ukpga/2025/18#section-14
15 The FCA and financial services interfaces: supplementary uk:ukpga/2025/18#section-15
16 The FCA and financial services interfaces: penalties and levies uk:ukpga/2025/18#section-16
17 The FCA and co-ordination with other regulators uk:ukpga/2025/18#section-17
18 Liability in damages uk:ukpga/2025/18#section-18
19 Duty to review regulations uk:ukpga/2025/18#section-19
20 Restrictions on processing and data protection uk:ukpga/2025/18#section-20
21 Regulations under this Part: supplementary uk:ukpga/2025/18#section-21
22 Regulations under this Part: Parliamentary procedure and consultation uk:ukpga/2025/18#section-22
23 Related subordinate legislation uk:ukpga/2025/18#section-23
24 Repeal of provisions relating to supply of customer data uk:ukpga/2025/18#section-24
25 Other defined terms uk:ukpga/2025/18#section-25
26 Index of defined terms for this Part uk:ukpga/2025/18#section-26
Part 2 Digital verification services · 29 provisions
27 Introductory uk:ukpga/2025/18#section-27
28 DVS trust framework uk:ukpga/2025/18#section-28
29 Supplementary codes uk:ukpga/2025/18#section-29
30 Withdrawal of a supplementary code uk:ukpga/2025/18#section-30
31 Review of DVS trust framework and supplementary codes uk:ukpga/2025/18#section-31
32 DVS register uk:ukpga/2025/18#section-32
33 Registration in the DVS register uk:ukpga/2025/18#section-33
34 Power to refuse registration in the DVS register uk:ukpga/2025/18#section-34
35 Registration of additional services uk:ukpga/2025/18#section-35
36 Supplementary notes uk:ukpga/2025/18#section-36
37 Addition of services to supplementary notes uk:ukpga/2025/18#section-37
38 Applications for registration, supplementary notes, etc uk:ukpga/2025/18#section-38
39 Fees for applications for registration, supplementary notes, etc uk:ukpga/2025/18#section-39
40 Duty to remove person from the DVS register uk:ukpga/2025/18#section-40
41 Power to remove person from the DVS register uk:ukpga/2025/18#section-41
42 Duty to remove services from the DVS register uk:ukpga/2025/18#section-42
43 Duty to remove supplementary notes from the DVS register uk:ukpga/2025/18#section-43
44 Duty to remove services from supplementary notes uk:ukpga/2025/18#section-44
45 Power of public authority to disclose information to registered person uk:ukpga/2025/18#section-45
46 Information disclosed by the Revenue and Customs uk:ukpga/2025/18#section-46
47 Information disclosed by the Welsh Revenue Authority uk:ukpga/2025/18#section-47
48 Information disclosed by Revenue Scotland uk:ukpga/2025/18#section-48
49 Code of practice about the disclosure of information uk:ukpga/2025/18#section-49
50 Trust mark for use by registered persons uk:ukpga/2025/18#section-50
51 Power of Secretary of State to require information uk:ukpga/2025/18#section-51
52 Arrangements for third party to exercise functions uk:ukpga/2025/18#section-52
53 Report on the operation of this Part uk:ukpga/2025/18#section-53
54 Index of defined terms for this Part uk:ukpga/2025/18#section-54
55 Powers relating to verification of identity or status uk:ukpga/2025/18#section-55
Part 3 National Underground Asset Register · 5 provisions
56 National Underground Asset Register: England and Wales uk:ukpga/2025/18#section-56
57 Information in relation to apparatus: England and Wales uk:ukpga/2025/18#section-57
58 National Underground Asset Register: Northern Ireland uk:ukpga/2025/18#section-58
59 Information in relation to apparatus: Northern Ireland uk:ukpga/2025/18#section-59
60 Pre-commencement consultation uk:ukpga/2025/18#section-60
Part 4 Registers of births and deaths · 5 provisions
61 Form in which registers of births and deaths are to be kept uk:ukpga/2025/18#section-61
62 Provision of equipment and facilities by local authorities uk:ukpga/2025/18#section-62
63 Requirements to sign register uk:ukpga/2025/18#section-63
64 Treatment of existing registers and records uk:ukpga/2025/18#section-64
65 Minor and consequential amendments uk:ukpga/2025/18#section-65
Chapter 1 Data protection · 43 provisions
66 The 2018 Act and the UK GDPR uk:ukpga/2025/18#section-66
67 Meaning of research and statistical purposes uk:ukpga/2025/18#section-67
68 Consent to processing for the purposes of scientific research uk:ukpga/2025/18#section-68
69 Consent to law enforcement processing uk:ukpga/2025/18#section-69
70 Lawfulness of processing uk:ukpga/2025/18#section-70
71 The purpose limitation uk:ukpga/2025/18#section-71
72 Processing in reliance on relevant international law uk:ukpga/2025/18#section-72
73 Elected representatives responding to requests uk:ukpga/2025/18#section-73
74 Processing of special categories of personal data uk:ukpga/2025/18#section-74
75 Fees and reasons for responses to data subjects’ requests about law enforcement processing uk:ukpga/2025/18#section-75
76 Time limits for responding to data subjects’ requests uk:ukpga/2025/18#section-76
77 Information to be provided to data subjects uk:ukpga/2025/18#section-77
78 Searches in response to data subjects’ requests uk:ukpga/2025/18#section-78
79 Data subjects’ rights to information: legal professional privilege exemption uk:ukpga/2025/18#section-79
80 Automated decision-making uk:ukpga/2025/18#section-80
81 Data protection by design: children’s higher protection matters uk:ukpga/2025/18#section-81
82 Logging of law enforcement processing uk:ukpga/2025/18#section-82
83 General processing and codes of conduct uk:ukpga/2025/18#section-83
84 Law enforcement processing and codes of conduct uk:ukpga/2025/18#section-84
85 Transfers of personal data to third countries and international organisations uk:ukpga/2025/18#section-85
86 Safeguards for processing for research etc purposes uk:ukpga/2025/18#section-86
87 Section 86: consequential provision uk:ukpga/2025/18#section-87
88 National security exemption uk:ukpga/2025/18#section-88
89 Joint processing by intelligence services and competent authorities uk:ukpga/2025/18#section-89
90 Joint processing: consequential amendments uk:ukpga/2025/18#section-90
91 Duties of the Commission in carrying out functions uk:ukpga/2025/18#section-91
92 Codes of practice for the processing of personal data uk:ukpga/2025/18#section-92
93 Codes of practice: panels and impact assessments uk:ukpga/2025/18#section-93
94 Manifestly unfounded or excessive requests to the Commissioner uk:ukpga/2025/18#section-94
95 Analysis of performance uk:ukpga/2025/18#section-95
96 Notices from the Commissioner uk:ukpga/2025/18#section-96
97 Power of the Commissioner to require documents uk:ukpga/2025/18#section-97
98 Power of the Commissioner to require a report uk:ukpga/2025/18#section-98
99 Assessment notices: removal of OFSTED restriction uk:ukpga/2025/18#section-99
100 Interview notices uk:ukpga/2025/18#section-100
101 Penalty notices uk:ukpga/2025/18#section-101
102 Annual report on regulatory action uk:ukpga/2025/18#section-102
103 Complaints by data subjects uk:ukpga/2025/18#section-103
104 Court procedure in connection with subject access requests uk:ukpga/2025/18#section-104
105 Consequential amendments to the EITSET Regulations uk:ukpga/2025/18#section-105
106 Protection of prohibitions, restrictions and data subject’s rights uk:ukpga/2025/18#section-106
107 Regulations under the UK GDPR uk:ukpga/2025/18#section-107
108 Further minor provision about data protection uk:ukpga/2025/18#section-108
Chapter 2 Privacy and electronic communications · 8 provisions
109 The PEC Regulations uk:ukpga/2025/18#section-109
110 Interpretation of the PEC Regulations uk:ukpga/2025/18#section-110
111 Duty to notify the Commissioner of personal data breach: time periods uk:ukpga/2025/18#section-111
112 Storing information in the terminal equipment of a subscriber or user uk:ukpga/2025/18#section-112
113 Emergency alerts: interpretation of time periods uk:ukpga/2025/18#section-113
114 Use of electronic mail for direct marketing by charities uk:ukpga/2025/18#section-114
115 Commissioner’s enforcement powers uk:ukpga/2025/18#section-115
116 Codes of conduct uk:ukpga/2025/18#section-116
Part 6 The Information Commission · 4 provisions
117 The Information Commission uk:ukpga/2025/18#section-117
118 Abolition of the office of Information Commissioner uk:ukpga/2025/18#section-118
119 Transfer of functions to the Information Commission uk:ukpga/2025/18#section-119
120 Transfer of property etc to the Information Commission uk:ukpga/2025/18#section-120
Part 7 Other provision about use of, or access to, data · 18 provisions
121 Information standards for health and adult social care in England uk:ukpga/2025/18#section-121
122 Grant of smart meter communication licences uk:ukpga/2025/18#section-122
123 Disclosure of information to improve public service delivery to undertakings uk:ukpga/2025/18#section-123
124 Retention of information by providers of internet services in connection with death of child uk:ukpga/2025/18#section-124
125 Information for research about online safety matters uk:ukpga/2025/18#section-125
126 Retention of biometric data and recordable offences uk:ukpga/2025/18#section-126
127 Retention of pseudonymised biometric data uk:ukpga/2025/18#section-127
128 Retention of biometric data from INTERPOL uk:ukpga/2025/18#section-128
129 The eIDAS Regulation uk:ukpga/2025/18#section-129
130 Recognition of EU conformity assessment bodies uk:ukpga/2025/18#section-130
131 Removal of recognition of EU standards etc uk:ukpga/2025/18#section-131
132 Recognition of overseas trust products uk:ukpga/2025/18#section-132
133 Co-operation between supervisory authority and overseas authorities uk:ukpga/2025/18#section-133
134 Time periods: the eIDAS Regulation and the EITSET Regulations uk:ukpga/2025/18#section-134
135 Economic impact assessment uk:ukpga/2025/18#section-135
136 Report on the use of copyright works in the development of AI systems uk:ukpga/2025/18#section-136
137 Progress statement uk:ukpga/2025/18#section-137
138 Creating, or requesting the creation of, purported intimate image of adult uk:ukpga/2025/18#section-138
Part 8 Final provisions · 6 provisions
139 Power to make consequential amendments uk:ukpga/2025/18#section-139
140 Regulations uk:ukpga/2025/18#section-140
141 Extent uk:ukpga/2025/18#section-141
142 Commencement uk:ukpga/2025/18#section-142
143 Transitional, transitory and saving provision uk:ukpga/2025/18#section-143
144 Short title uk:ukpga/2025/18#section-144
Part 1 Amendments of the Births and Deaths Registration Act 1953 · 16 provisions
1 uk:ukpga/2025/18#schedule-3-paragraph-1
2 uk:ukpga/2025/18#schedule-3-paragraph-2
3 uk:ukpga/2025/18#schedule-3-paragraph-3
4 uk:ukpga/2025/18#schedule-3-paragraph-4
5 uk:ukpga/2025/18#schedule-3-paragraph-5
6 uk:ukpga/2025/18#schedule-3-paragraph-6
7 uk:ukpga/2025/18#schedule-3-paragraph-7
8 uk:ukpga/2025/18#schedule-3-paragraph-8
9 uk:ukpga/2025/18#schedule-3-paragraph-9
10 uk:ukpga/2025/18#schedule-3-paragraph-10
11 uk:ukpga/2025/18#schedule-3-paragraph-11
12 uk:ukpga/2025/18#schedule-3-paragraph-12
13 uk:ukpga/2025/18#schedule-3-paragraph-13
14 uk:ukpga/2025/18#schedule-3-paragraph-14
15 uk:ukpga/2025/18#schedule-3-paragraph-15
16 uk:ukpga/2025/18#schedule-3-paragraph-16
Part 2 Amendments of other legislation · 12 provisions
17 Registration Service Act 1953 uk:ukpga/2025/18#schedule-3-paragraph-17
18 Registration Service Act 1953 uk:ukpga/2025/18#schedule-3-paragraph-18
19 Registration Service Act 1953 uk:ukpga/2025/18#schedule-3-paragraph-19
20 Registration Service Act 1953 uk:ukpga/2025/18#schedule-3-paragraph-20
21 Public Records Act 1958 uk:ukpga/2025/18#schedule-3-paragraph-21
22 Social Security Administration Act 1992 uk:ukpga/2025/18#schedule-3-paragraph-22
23 Education Act 1996 uk:ukpga/2025/18#schedule-3-paragraph-23
24 Adoption and Children Act 2002 uk:ukpga/2025/18#schedule-3-paragraph-24
25 Gender Recognition Act 2004 uk:ukpga/2025/18#schedule-3-paragraph-25
26 Gender Recognition Act 2004 uk:ukpga/2025/18#schedule-3-paragraph-26
27 Gender Recognition Act 2004 uk:ukpga/2025/18#schedule-3-paragraph-27
28 Presumption of Death Act 2013 uk:ukpga/2025/18#schedule-3-paragraph-28
Schedule 6 · 16 provisions
1 The UK GDPR uk:ukpga/2025/18#schedule-6-paragraph-1
2 uk:ukpga/2025/18#schedule-6-paragraph-2
3 uk:ukpga/2025/18#schedule-6-paragraph-3
4 uk:ukpga/2025/18#schedule-6-paragraph-4
5 uk:ukpga/2025/18#schedule-6-paragraph-5
6 uk:ukpga/2025/18#schedule-6-paragraph-6
7 uk:ukpga/2025/18#schedule-6-paragraph-7
8 uk:ukpga/2025/18#schedule-6-paragraph-8
9 uk:ukpga/2025/18#schedule-6-paragraph-9
10 The 2018 Act uk:ukpga/2025/18#schedule-6-paragraph-10
11 uk:ukpga/2025/18#schedule-6-paragraph-11
12 uk:ukpga/2025/18#schedule-6-paragraph-12
13 uk:ukpga/2025/18#schedule-6-paragraph-13
14 uk:ukpga/2025/18#schedule-6-paragraph-14
15 uk:ukpga/2025/18#schedule-6-paragraph-15
16 uk:ukpga/2025/18#schedule-6-paragraph-16
Schedule 7 · 10 provisions
1 Introduction uk:ukpga/2025/18#schedule-7-paragraph-1
2 General principles for transfers uk:ukpga/2025/18#schedule-7-paragraph-2
3 Transfers approved by regulations uk:ukpga/2025/18#schedule-7-paragraph-3
4 uk:ukpga/2025/18#schedule-7-paragraph-4
5 Transfers approved by regulations: monitoring uk:ukpga/2025/18#schedule-7-paragraph-5
6 Transfers subject to appropriate safeguards uk:ukpga/2025/18#schedule-7-paragraph-6
7 uk:ukpga/2025/18#schedule-7-paragraph-7
8 uk:ukpga/2025/18#schedule-7-paragraph-8
9 Derogations for specific situations uk:ukpga/2025/18#schedule-7-paragraph-9
10 Public interest restrictions uk:ukpga/2025/18#schedule-7-paragraph-10
Schedule 8 · 10 provisions
1 Introduction uk:ukpga/2025/18#schedule-8-paragraph-1
2 Overview and interpretation uk:ukpga/2025/18#schedule-8-paragraph-2
3 General principles for transfer uk:ukpga/2025/18#schedule-8-paragraph-3
4 Transfers approved by regulations uk:ukpga/2025/18#schedule-8-paragraph-4
5 Transfers approved by regulations: monitoring uk:ukpga/2025/18#schedule-8-paragraph-5
6 Transfers subject to appropriate safeguards uk:ukpga/2025/18#schedule-8-paragraph-6
7 Transfers based on special circumstances uk:ukpga/2025/18#schedule-8-paragraph-7
8 Transfers to particular recipients uk:ukpga/2025/18#schedule-8-paragraph-8
9 uk:ukpga/2025/18#schedule-8-paragraph-9
10 Subsequent transfers uk:ukpga/2025/18#schedule-8-paragraph-10
Part 1 Minor and consequential amendments · 25 provisions
1 The UK GDPR uk:ukpga/2025/18#schedule-9-paragraph-1
2 uk:ukpga/2025/18#schedule-9-paragraph-2
3 uk:ukpga/2025/18#schedule-9-paragraph-3
4 uk:ukpga/2025/18#schedule-9-paragraph-4
5 uk:ukpga/2025/18#schedule-9-paragraph-5
6 uk:ukpga/2025/18#schedule-9-paragraph-6
7 uk:ukpga/2025/18#schedule-9-paragraph-7
8 uk:ukpga/2025/18#schedule-9-paragraph-8
9 uk:ukpga/2025/18#schedule-9-paragraph-9
10 uk:ukpga/2025/18#schedule-9-paragraph-10
11 The 2018 Act uk:ukpga/2025/18#schedule-9-paragraph-11
12 uk:ukpga/2025/18#schedule-9-paragraph-12
13 uk:ukpga/2025/18#schedule-9-paragraph-13
14 uk:ukpga/2025/18#schedule-9-paragraph-14
15 uk:ukpga/2025/18#schedule-9-paragraph-15
16 uk:ukpga/2025/18#schedule-9-paragraph-16
17 uk:ukpga/2025/18#schedule-9-paragraph-17
18 uk:ukpga/2025/18#schedule-9-paragraph-18
19 uk:ukpga/2025/18#schedule-9-paragraph-19
20 uk:ukpga/2025/18#schedule-9-paragraph-20
21 uk:ukpga/2025/18#schedule-9-paragraph-21
22 uk:ukpga/2025/18#schedule-9-paragraph-22
23 uk:ukpga/2025/18#schedule-9-paragraph-23
24 uk:ukpga/2025/18#schedule-9-paragraph-24
25 uk:ukpga/2025/18#schedule-9-paragraph-25
Part 2 Transitional provision · 8 provisions
26 The UK GDPR: transfers approved by regulations uk:ukpga/2025/18#schedule-9-paragraph-26
27 The UK GDPR: transfers subject to appropriate safeguards uk:ukpga/2025/18#schedule-9-paragraph-27
28 The UK GDPR: transfers subject to appropriate safeguards provided by standard data protection clauses uk:ukpga/2025/18#schedule-9-paragraph-28
29 uk:ukpga/2025/18#schedule-9-paragraph-29
30 The UK GDPR: transfers necessary for important reasons of public interest uk:ukpga/2025/18#schedule-9-paragraph-30
31 The UK GDPR: restrictions on transfers of personal data to third countries and international organisations uk:ukpga/2025/18#schedule-9-paragraph-31
32 Part 3 of the 2018 Act (law enforcement processing): transfers approved by regulations uk:ukpga/2025/18#schedule-9-paragraph-32
33 Part 3 of the 2018 Act (law enforcement processing): transfers subject to appropriate safeguards uk:ukpga/2025/18#schedule-9-paragraph-33
Schedule 10 · 21 provisions
1 The UK GDPR uk:ukpga/2025/18#schedule-10-paragraph-1
2 The UK GDPR uk:ukpga/2025/18#schedule-10-paragraph-2
3 The UK GDPR uk:ukpga/2025/18#schedule-10-paragraph-3
4 The UK GDPR uk:ukpga/2025/18#schedule-10-paragraph-4
5 The UK GDPR uk:ukpga/2025/18#schedule-10-paragraph-5
6 The UK GDPR uk:ukpga/2025/18#schedule-10-paragraph-6
7 The UK GDPR uk:ukpga/2025/18#schedule-10-paragraph-7
8 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-8
9 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-9
10 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-10
11 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-11
12 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-12
13 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-13
14 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-14
15 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-15
16 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-16
17 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-17
18 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-18
19 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-19
20 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-20
21 The 2018 Act uk:ukpga/2025/18#schedule-10-paragraph-21
Schedule 11 · 32 provisions
1 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-1
2 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-2
3 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-3
4 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-4
5 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-5
6 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-6
7 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-7
8 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-8
9 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-9
10 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-10
11 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-11
12 The UK GDPR uk:ukpga/2025/18#schedule-11-paragraph-12
13 The 2018 Act uk:ukpga/2025/18#schedule-11-paragraph-13
14 uk:ukpga/2025/18#schedule-11-paragraph-14
15 uk:ukpga/2025/18#schedule-11-paragraph-15
16 uk:ukpga/2025/18#schedule-11-paragraph-16
17 uk:ukpga/2025/18#schedule-11-paragraph-17
18 uk:ukpga/2025/18#schedule-11-paragraph-18
19 uk:ukpga/2025/18#schedule-11-paragraph-19
20 uk:ukpga/2025/18#schedule-11-paragraph-20
21 uk:ukpga/2025/18#schedule-11-paragraph-21
22 uk:ukpga/2025/18#schedule-11-paragraph-22
23 uk:ukpga/2025/18#schedule-11-paragraph-23
24 uk:ukpga/2025/18#schedule-11-paragraph-24
25 uk:ukpga/2025/18#schedule-11-paragraph-25
26 uk:ukpga/2025/18#schedule-11-paragraph-26
27 uk:ukpga/2025/18#schedule-11-paragraph-27
28 uk:ukpga/2025/18#schedule-11-paragraph-28
29 uk:ukpga/2025/18#schedule-11-paragraph-29
30 uk:ukpga/2025/18#schedule-11-paragraph-30
31 uk:ukpga/2025/18#schedule-11-paragraph-31
32 Victims and Prisoners Act 2024 uk:ukpga/2025/18#schedule-11-paragraph-32
Schedule 14 · 4 provisions
1 Schedule 12A to the Data Protection Act 2018 uk:ukpga/2025/18#schedule-14-paragraph-1
2 Transitional provision: first chair uk:ukpga/2025/18#schedule-14-paragraph-2
3 Transitional provision: consultation about non-executive members uk:ukpga/2025/18#schedule-14-paragraph-3
4 Transitional provision: consultation about interim chief executive uk:ukpga/2025/18#schedule-14-paragraph-4
Schedule 15 · 8 provisions
1 uk:ukpga/2025/18#schedule-15-paragraph-1
2 uk:ukpga/2025/18#schedule-15-paragraph-2
3 uk:ukpga/2025/18#schedule-15-paragraph-3
4 uk:ukpga/2025/18#schedule-15-paragraph-4
5 uk:ukpga/2025/18#schedule-15-paragraph-5
6 uk:ukpga/2025/18#schedule-15-paragraph-6
7 uk:ukpga/2025/18#schedule-15-paragraph-7
8 uk:ukpga/2025/18#schedule-15-paragraph-8
Part 1 Amendments of the Energy Act 2008 · 4 provisions
1 uk:ukpga/2025/18#schedule-16-paragraph-1
2 uk:ukpga/2025/18#schedule-16-paragraph-2
3 uk:ukpga/2025/18#schedule-16-paragraph-3
4 uk:ukpga/2025/18#schedule-16-paragraph-4
Part 2 Amendments of other legislation · 3 provisions
5 Gas Act 1986 uk:ukpga/2025/18#schedule-16-paragraph-5
6 Electricity Act 1989 uk:ukpga/2025/18#schedule-16-paragraph-6
7 Electricity and Gas (Competitive Tenders for Smart Meter Communication Licences) Regulations 2012 uk:ukpga/2025/18#schedule-16-paragraph-7

Impact profile

Transportation
2
Banking finance
2
Public sector health
2
Energy, utilities & telco
2
Insurance pensions
2
Services
2
Media entertainment
2
Manufacturing construction
2
Commerce
2

Dimensions

Mechanism strength
3
Signicat obligation
2
Urgency
Pending

Penalties

Fines not exceeding level 4 on the standard scale under s. 57, level 5 on the standard scale under s. 58, and the standard maximum amount under Sch. 10 para. 18.

Definitions

direct marketing
“the communication (by whatever means) of advertising or marketing material which is directed to particular individuals”
s. 110
the Periods of Time Regulation
“Regulation (EEC, Euratom) No. 1182/71 of the Council of 3 June 1971 determining the rules applicable to periods, dates and time limits.”
s. 110

References

uk:eur/2008/765 (unregistered reference)

uk:eur/2014/910

uk:eur/2016/679

uk:ukpga/2018/12

uk:ukpga/2023/50

uk:uksi/2003/2426

uk:uksi/2016/696