Data Protection Act 2018 (c. 12) – Section 186A – Protection of data subject’s rights: further provision
Sections
Section 186A[F1Protection of data subject’s rights: further provision
(1) This section is about the relationship between—
- (a)a pre-commencement enactment which prohibits or restricts the disclosure of information or authorises the withholding of information, and
- (b)a provision of the UK GDPR or this Act listed in section 186(2).
(2) The relationship is not changed by section 5(A1) of the European Union (Withdrawal) Act 2018 (removal of the principle of supremacy of EU law) (or the repeal of section 5(1) to (3) of that Act).
(3) Subsection (1) of section 186 does not apply to the relationship so far as there is a contrary intention, whether express or implied (taking account of, among other things, subsection (2) of this section).
(4) Nothing is to be implied about a relationship described in subsection (1) merely due to the fact that express provision stating that section 186(1) applies (or with similar effect) is made in connection with one such relationship but not another.
(5) In this section, “pre-commencement enactment” means an enactment so far as passed or made before [F220th August 2025], other than an enactment contained in, or made under, a provision listed in section 186(2) or (3).]
Amended text
This Section is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.
Annotations
Textual Amendments
- F1 S. 186A inserted (1.1.2024) by Data (Use and Access) Act 2025 (c. 18), ss. 106(5)(7), 142(1); S.I. 2025/904, reg. 2(k)
- F2 Words in s. 186A(5) substituted (29.1.2026) by The Data (Use and Access) Act 2025 (Commencement No. 6 and Transitional and Saving Provisions) Regulations 2026 (S.I. 2026/82), reg. 12(4)
https://dpa2018.digiphile.law/article/article-186A.html
Text as at 18 September 2026.
This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.