Data Protection Act 2018UK · 2018 c. 12
Digiphile
Data Protection Act 2018 (c. 12) – Schedule 14 – Co-operation and mutual assistance

Schedules

Schedule 14Co-operation and mutual assistanceSection 118

F1PART 1 Law Enforcement Directive

F1Co-operation

1 F1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Requests for information and assistance from LED supervisory authorities

2 F1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Fees

3 F1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1Restrictions on use of information

4 F1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1LED supervisory authority

5 F1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

PART 2 Data Protection Convention

Co-operation between the [F2Commission] and foreign designated authorities

6
(1) The [F3Commission] must, at the request of a foreign designated authority—
  • (a)
    provide that authority with such information referred to in Article 13(3)(a) of the Data Protection Convention (information on law and administrative practice in the field of data protection) as is the subject of the request, and
  • (b)
    take appropriate measures in accordance with Article 13(3)(b) of the Data Protection Convention for providing that authority with information relating to the processing of personal data in the United Kingdom.
(2) The [F3Commission] may ask a foreign designated authority—
  • (a)
    to provide the [F3Commission] with information referred to in Article 13(3) of the Data Protection Convention, or
  • (b)
    to take appropriate measures to provide such information.

Assisting persons resident outside the UK with requests under Article 14 of the Convention

7
(1) This paragraph applies where a request for assistance in exercising any of the rights referred to in Article 8 of the Data Protection Convention in the United Kingdom is made by a person resident outside the United Kingdom, including where the request is forwarded to the [F4Commission] through the Secretary of State or a foreign designated authority.
(2) The [F4Commission] must take appropriate measures to assist the person to exercise those rights.

Assisting UK residents with requests under Article 8 of the Convention

8
(1) This paragraph applies where a request for assistance in exercising any of the rights referred to in Article 8 of the Data Protection Convention in a country or territory (other than the United Kingdom) specified in the request is—
  • (a)
    made by a person resident in the United Kingdom, and
  • (b)
    submitted through the [F5Commission] under Article 14(2) of the Convention.
(2) If the [F5Commission] is satisfied that the request contains all necessary particulars referred to in Article 14(3) of the Data Protection Convention, the [F5Commission] must send the request to the foreign designated authority in the specified country or territory.
(3) Otherwise, the [F5Commission] must, where practicable, notify the person making the request of the reasons why the [F5Commission] is not required to assist.

Restrictions on use of information

9 Where the [F6Commission] receives information from a foreign designated authority as a result of—
  • (a)
    a request made by the [F6Commission] under paragraph 6(2), or
  • (b)
    a request received by the [F6Commission] under paragraph 6(1) or 7,

the [F6Commission] may use the information only for the purposes specified in the request.

Foreign designated authority

10 In this Part of this Schedule, “foreign designated authority” means an authority designated for the purposes of Article 13 of the Data Protection Convention by a party, other than the United Kingdom, which is bound by that Data Protection Convention.

Amended text

This Schedule is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.

Annotations

Textual Amendments

  1. F1 Sch. 14 Pt. 1 omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 98 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
  2. F2 Word in Sch. 14 para. 6 cross-heading substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
  3. F3 Word in Sch. 14 para. 6 substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
  4. F4 Word in Sch. 14 para. 7 substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
  5. F5 Word in Sch. 14 para. 8 substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)
  6. F6 Word in Sch. 14 para. 9 substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)

Commencement Information

  1. I1 Sch. 14 para. 6 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(e)
  2. I2 Sch. 14 para. 7 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(e)
  3. I3 Sch. 14 para. 8 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(e)
  4. I4 Sch. 14 para. 9 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(e)
  5. I5 Sch. 14 para. 10 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(e)

https://dpa2018.digiphile.law/schedule/schedule-14.html

Text as at 18 September 2026.

This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.

Type to search the full text.