DPA 1998Data Protection Act 1998

The Act implemented the EU Data Protection Directive 95/46/EC in the UK and replaced the Data Protection Act 1984. It applied to personal data held on computers and in relevant paper filing systems and set out eight data protection principles in Schedule 1. It gave individuals rights including subject access, and created offences such as unlawfully obtaining or disclosing personal data. It was repealed on 25 May 2018 by the Data Protection Act 2018, except s. 62 and parts of Schedule 15.

• eight data protection principles
• subject access
• notification to the Commissioner
• transfers outside the EEA
• offences

Covered manual records in structured filing systems as well as computer data; eighth principle restricted transfers outside the European Economic Area.

• Adopted 16 July 1998
• In force 1 March 2000
• Ended 25 May 2018
• Royal Assent 16 July 1998; most provisions commenced 1 March 2000 (S.I. 2000/183); repealed 25 May 2018 by the Data Protection Act 2018 (S.I. 2018/625), save for a few provisions

• Authoritative text legislation.gov.uk

• legislation.gov.uk
• legislation.gov.uk
• legislation.gov.uk
• en.wikipedia.org

High confidence.

Section 56 was excluded from the 2000 commencement order (it depended on the Police Act 1997). Repeal was not total: s. 62 and Schedule 15 paras 13, 15, 16, 18 and 19 survived. The Commissioner's title change to Information Commissioner (2001) comes from a National Archives catalogue summary.