Data Protection Act 2018UK · 2018 c. 12
Digiphile
Data Protection Act 2018 (c. 12) – Section 124A – Other codes of practice

Sections

Section 124A[F1Other codes of practice

(1) The [F2Commission] must prepare appropriate codes of practice giving guidance as to good practice in the processing of personal data if required to do so by regulations made by the Secretary of State.
(2) Regulations under this section—
  • (a)
    must describe the personal data or processing to which the code of practice is to relate, and
  • (b)
    may describe the persons or classes of person to whom it is to relate.
(3) Where a code under this section is in force, the [F3Commission] may prepare amendments of the code or a replacement code.
(4) Before preparing a code or amendments under this section, the [F3Commission] must consult the Secretary of State and such of the following as the [F3Commission] considers appropriate—
  • (a)
    trade associations;
  • (b)
    data subjects;
  • (c)
    persons who appear to the [F3Commission] to represent the interests of data subjects.
(5) A code under this section may include transitional provision or savings.
(6) Regulations under this section are subject to the negative resolution procedure.
(7) In this section—
  • “good practice in the processing of personal data” means such practice in the processing of personal data as appears to the [F4Commission] to be desirable having regard to the interests of data subjects and others, including compliance with the requirements of the data protection legislation;
  • “trade association” includes a body representing controllers or processors.]

Amended text

This Section is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.

Annotations

Textual Amendments

  1. F1 S. 124A inserted (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 92(2), 142(1)(2)(h); S.I. 2025/904, reg. 2(f)
  2. F2 Word in s. 124A(1) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
  3. F3 Word in s. 124A(3)(4) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
  4. F4 Word in s. 124A(7) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)

https://dpa2018.digiphile.law/article/article-124A.html

Text as at 18 September 2026.

This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.

Type to search the full text.