Data Protection Act 2018 (c. 12) – Section 164B – Controllers to notify the Commission of the number of complaints
(1) The Secretary of State may by regulations require a controller to notify the [F3Commission] of the number of complaints made to the controller under section 164A in periods specified or described in the regulations.
(2) Regulations under this section may provide that a controller is required to make a notification to the [F3Commission] in respect of a period only in circumstances specified in the regulations.
(3) Regulations under this section may include—
- (a)provision about a matter listed in subsection (4), or
- (b)provision conferring power on the [F4Commission] to determine those matters.
(4) The matters are—
- (a)the form and manner in which a notification must be made,
- (b)the time at which, or period within which, a notification must be made, and
- (c)how the number of complaints made to a controller during a period is to be calculated.
(5) Regulations under this section are subject to the negative resolution procedure.]
Amended text
This Section is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.
Annotations
Textual Amendments
- F1 Ss. 164A, 164B inserted (19.6.2025 for specified purposes, 19.6.2026 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 103(2), 142(1)(2)(h); S.I. 2026/82, reg. 3(a) (with reg. 7)
- F2 Word in s. 164B heading substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3) (with reg. 1(5)); S.I. 2026/1015, reg. 2(c)
- F3 Word in s. 164B(1)(2) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3) (with reg. 1(5)); S.I. 2026/1015, reg. 2(c)
- F4 Word in s. 164B(3)(b) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3) (with reg. 1(5)); S.I. 2026/1015, reg. 2(c)
https://dpa2018.digiphile.law/article/article-164B.html
Text as at 18 September 2026.
This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.