Data Protection Act 2018UK · 2018 c. 12
Digiphile

Sections

Section 206Index of defined expressions

The Table below lists provisions which define or otherwise explain terms defined for this Act, for a Part of this Act or for Chapter 2 or 3 of Part 2 of this Act.

the affirmative resolution procedure

section 182

F1. . .

F1. . .

F1. . .

F1. . .

assessment notice (in Part 6)

section 181

biometric data

section 205

certification provider (in Part 6)

section 181

[F2the Commission

section 3]

F3. . .

F3. . .

competent authority (in [F4Parts 3 and 4])

[F5sections 30 and 82]

consent [F6(to processing of personal data)] (in [F7Parts 3 and] 4)

[F8sections 33, 40A and] 84

controller

section 3

data concerning health

section 205

the Data Protection Convention

section 3

the data protection legislation

section 3

data subject

section 3

[F9designation notice (in Part 4)

section 84]

employee (in Parts 3 and 4)

sections 33 and 84

enactment

section 205

enforcement notice (in Part 6)

section 181

[F10the EU GDPR

section 3]

filing system

section 3

FOI public authority (in Chapter 3 of Part 2)

section 21

F11. . .

F11. . .

genetic data

section 205

government department

section 205

health professional

section 204

health record

section 205

identifiable living individual

section 3

inaccurate

section 205

information notice (in Part 6)

section 181

intelligence service (in Part 4)

section 82

international obligation of the United Kingdom

section 205

international organisation

section 205

[F12interview notice (in Part 6)

section 181]

the Law Enforcement Directive

section 3

the law enforcement purposes (in Part 3)

section 31

the made affirmative resolution procedure

section 182

Minister of the Crown

section 205

the negative resolution procedure

section 182

penalty notice (in Part 6)

section 181

penalty variation notice (in Part 6)

section 181

personal data

section 3

personal data breach (in Parts 3 and 4)

sections 33 and 84

processing

section 3

processor

section 3

profiling (in Part 3)

section 33

public authority (in the [F13UK GDPR] and Part 2)

section 7

public body (in the [F13UK GDPR] and Part 2)

section 7

publish

section 205

[F9qualifying competent authority (in Part 4)

section 82]

recipient (in Parts 3 and 4)

sections 33 and 84

F14. . .

F14. . .

representative body (in relation to a right of a data subject)

section 187

restriction of processing (in Parts 3 and 4)

sections 33 and 84

[F15sensitive processing (in Parts 3 and 4)

sections 35 and 86]

social work professional

section 204

the special purposes (in Part 6)

section 174

special purposes proceedings (in Part 6)

section 174

subordinate legislation

section 205

third country (in Part 3)

section 33

tribunal

section 205

the Tribunal

section 205

[F16the UK GDPR

section 3]

[F9withdrawal notice (in Part 4)

section 84]

Amended text

This Section is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.

Annotations

Textual Amendments

  1. F1 Words in s. 206 Table omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 86(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
  2. F2 Words in s. 206 Table inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 117(5), 142(1); S.I. 2025/904, reg. 2(r)
  3. F3 Words in s. 206 Table omitted (30.9.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 118(5), 142(1); S.I. 2026/1015, reg. 2(b) (with reg. 3)
  4. F4 Words in s. 206 Table substituted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 90(9)(a)(i), 142(1); S.I. 2025/996, reg. 2(2)(b)
  5. F5 Words in s. 206 Table substituted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 90(9)(a)(ii), 142(1); S.I. 2025/996, reg. 2(2)(b)
  6. F6 Words in s. 206 Table inserted (19.8.2025) by Data (Use and Access) Act 2025 (c. 18) , ss. 69(5)(a), 142(3)(a)
  7. F7 Words in s. 206 Table substituted (19.8.2025) by Data (Use and Access) Act 2025 (c. 18) , ss. 69(5)(b), 142(3)(a)
  8. F8 Words in s. 206 Table substituted (19.8.2025) by Data (Use and Access) Act 2025 (c. 18) , ss. 69(5)(c), 142(3)(a)
  9. F9 Words in s. 206 Table inserted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 90(9)(b), 142(1); S.I. 2025/996, reg. 2(2)(b)
  10. F10 Words in s. 206 Table inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 86(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
  11. F11 Words in s. 206 Table omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 86(4) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
  12. F12 Words in s. 206 Table inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), ss. 100(11), 142(1); S.I. 2026/82, reg. 2(s)
  13. F13 Words in s. 206 Table substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 86(5) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
  14. F14 Words in s. 206 Table omitted (20.8.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 11 para. 27; S.I. 2025/904, reg. 2(y)
  15. F15 Words in s. 206 Table inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 74(9), 142(1); S.I. 2025/904, reg. 2(c)
  16. F16 Words in s. 206 Table inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 86(6) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

Modifications etc. (not altering text)

  1. C1 S. 206: power to amend conferred (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Regulation (EU) 679/2016, Art. 11A(3) (as inserted by Data (Use and Access) Act 2025 (c. 18), ss. 74(1), 142(1)(2)(h); S.I. 2025/904, reg. 2(c))

Commencement Information

  1. I1 S. 206 in force at Royal Assent, see s. 212(2)(c)