Data Protection Act 2018UK · 2018 c. 12
Digiphile
Data Protection Act 2018 (c. 12) – Section 52 – Form of provision of information etc

Sections

Section 52Form of provision of information etc

(1) The controller must take reasonable steps to ensure that any information that is required by [F1or under] this Chapter to be provided to the data subject is provided in a concise, intelligible and easily accessible form, using clear and plain language.
(2) Subject to subsection (3), the information may be provided in any form, including electronic form.
(3) Where information is provided in response to a request [F2made by the data subject under or by virtue of any of sections 45, 46, 47, 50C or 50D], the controller must provide the information in the same form as the request where it is practicable to do so.
(4) Where the controller has reasonable doubts about the identity of an individual making a request [F3under or by virtue of any of sections 45, 46, 47, 50C or 50D], the controller may—
  • (a)
    request the provision of additional information to enable the controller to confirm the identity, and
  • (b)
    delay dealing with the request until the identity is confirmed.
(5) Subject to section 53, any information that is required by [F4or under] this Chapter to be provided to the data subject must be provided free of charge.
(6) The controller must facilitate the exercise of the rights of the data subject [F5arising under or by virtue of sections 45 to 50D].

Amended text

This Section is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.

Annotations

Textual Amendments

  1. F1 Words in s. 52(1) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 6 para. 13(2); S.I. 2026/82, reg. 2(z8) (with reg. 5)
  2. F2 Words in s. 52(3) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 6 para. 13(3); S.I. 2026/82, reg. 2(z8) (with reg. 5)
  3. F3 Words in s. 52(4) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 6 para. 13(4); S.I. 2026/82, reg. 2(z8) (with reg. 5)
  4. F4 Words in s. 52(5) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 6 para. 13(5); S.I. 2026/82, reg. 2(z8) (with reg. 5)
  5. F5 Words in s. 52(6) substituted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 6 para. 13(6); S.I. 2026/82, reg. 2(z8) (with reg. 5)

Commencement Information

  1. I1 S. 52 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)

https://dpa2018.digiphile.law/article/article-52.html

Text as at 18 September 2026.

This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.

Type to search the full text.