Data Protection Act 2018UK · 2018 c. 12
Digiphile
Data Protection Act 2018 (c. 12) – Section 125 – Approval of codes prepared under sections 121 to 124A

Sections

Section 125Approval of codes prepared under sections 121 to [F1124A]

(1) When a code is prepared under section 121, 122, 123 [F2, 124 or 124A]—
  • (a)
    the [F3Commission] must submit the final version to the Secretary of State, and
  • (b)
    the Secretary of State must lay the code before Parliament.
(2) F4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
(3) If, within the 40-day period, either House of Parliament resolves not to approve a code prepared under section 121, 122, 123 [F5, 124 or 124A], the [F6Commission] must not issue the code.
(4) If no such resolution is made within that period—
  • (a)
    the [F7Commission] must issue the code, and
  • (b)
    the code comes into force at the end of the period of 21 days beginning with the day on which it is issued.
(5) [F8 If the [F9Commission] is prevented by subsection (3) from issuing a code that is not a replacement code, the [F9Commission] must prepare another version of the code.]
(6) Nothing in subsection (3) prevents another version of the code being laid before Parliament.
(7) In this section, “the 40-day period” means—
  • (a)
    if the code is laid before both Houses of Parliament on the same day, the period of 40 days beginning with that day, or
  • (b)
    if the code is laid before the Houses of Parliament on different days, the period of 40 days beginning with the later of those days.
(8) In calculating the 40-day period, no account is to be taken of any [F10whole days that fall within a] period during which Parliament is dissolved or prorogued or during which both Houses of Parliament are adjourned for more than 4 days.
(9) This section, other than [F11subsection (5)], applies in relation to amendments prepared under section 121, 122, 123 [F12, 124 or 124A] as it applies in relation to codes prepared under those sections.

Amended text

This Section is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.

Annotations

Textual Amendments

  1. F1 Word in s. 125 heading substituted (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 92(3)(a), 142(1)(2)(h); S.I. 2025/904, reg. 2(f)
  2. F2 Words in s. 125(1) substituted (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 92(3)(b), 142(1)(2)(h); S.I. 2025/904, reg. 2(f)
  3. F3 Word in s. 125(1)(a) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
  4. F4 S. 125(2) omitted (20.8.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 19(2); S.I. 2025/904, reg. 2(y)
  5. F5 Words in s. 125(3) substituted (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 92(3)(c), 142(1)(2)(h); S.I. 2025/904, reg. 2(f)
  6. F6 Word in s. 125(3) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
  7. F7 Word in s. 125(4)(a) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
  8. F8 S. 125(5) substituted (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 92(3)(d), 142(1)(2)(h); S.I. 2025/904, reg. 2(f)
  9. F9 Word in s. 125(5) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
  10. F10 Words in s. 125(8) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 19(3); S.I. 2025/904, reg. 2(y)
  11. F11 Words in s. 125(9) substituted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 19(4); S.I. 2025/904, reg. 2(y)
  12. F12 Words in s. 125(9) substituted (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 92(3)(e), 142(1)(2)(h); S.I. 2025/904, reg. 2(f)

Commencement Information

  1. I1 S. 125 not in force at Royal Assent; s. 125 in force at 23.7.2018 for specified purposes, see s. 212(3)(b)
  2. I2 S. 125 in force at 23.7.2018 for specified purposes by S.I. 2018/625, reg. 3(b)

https://dpa2018.digiphile.law/article/article-125.html

Text as at 18 September 2026.

This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.

Type to search the full text.