Data Protection Act 2018UK · 2018 c. 12
Digiphile
Data Protection Act 2018 (c. 12) – Section 191 – Framework for Data Processing by Government

Sections

Section 191Framework for Data Processing by Government

(1) The Secretary of State may prepare a document, called the Framework for Data Processing by Government, which contains guidance about the processing of personal data in connection with the exercise of functions of—
  • (a)
    the Crown, a Minister of the Crown or a United Kingdom government department, and
  • (b)
    a person with functions of a public nature who is specified or described in regulations made by the Secretary of State.
(2) The document may make provision relating to all of those functions or only to particular functions or persons.
(3) The document may not make provision relating to, or to the functions of, a part of the Scottish Administration, the Welsh Government, a Northern Ireland Minister or a Northern Ireland department.
(4) The Secretary of State may from time to time prepare amendments of the document or a replacement document.
(5) Before preparing a document or amendments under this section, the Secretary of State must consult—
  • (a)
    the [F1Commission], and
  • (b)
    any other person the Secretary of State considers it appropriate to consult.
(6) Regulations under subsection (1)(b) are subject to the negative resolution procedure.
(7) In this section, “Northern Ireland Minister” includes the First Minister and deputy First Minister in Northern Ireland.

Amended text

This Section is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.

Annotations

Textual Amendments

  1. F1 Word in s. 191(5)(a) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)

Commencement Information

  1. I1 S. 191 in force at Royal Assent for specified purposes, see s. 212(2)(f)
  2. I2 S. 191 in force at 23.7.2018 in so far as not already in force by S.I. 2018/625, reg. 3(h)

https://dpa2018.digiphile.law/article/article-191.html

Text as at 18 September 2026.

This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.

Type to search the full text.