An Act to make new provision for the regulation of the processing of information relating to individuals, including the obtaining, holding, use or disclosure of such information.
Citation
1998 c. 29
Territorial extent
England and Wales
Scotland
Northern Ireland
Dates
Royal assent
16 July 1998
Other legislation
Repeals/revokes
Data Protection Act 1984
Repealed by
Data Protection Act 2018
Status: Repealed
Text of statute as originally enacted
United Kingdom legislation
Data Protection Act 1984
Act of Parliament
Parliament of the United Kingdom
Long title
An Act to regulate the use of automatically processed information relating to individuals and the provision of services in respect of such information.
Citation
1984 c. 35
Dates
Royal assent
12 July 1984
Repealed
1 March 2000
Other legislation
Repealed by
Data Protection Act 1998
Status: Repealed
Text of statute as originally enacted
The Data Protection Act 1998 (c. 29) (DPA) was an Act of Parliament of the United Kingdom designed to protect personal data stored on computers or in an organised paper filing system. It enacted provisions from the European Union (EU) Data Protection Directive 1995 on the protection, processing, and movement of data.
Under the 1998 DPA, individuals had legal rights to control information about themselves. Most of the Act did not apply to domestic use,[1] such as keeping a personal address book. Anyone holding personal data for other purposes was legally obliged to comply with this Act, subject to some exemptions. The Act defined eight data protection principles to ensure that information was processed lawfully.
It was superseded by the Data Protection Act 2018 (DPA 2018) on 23 May 2018. The DPA 2018 supplements the EU General Data Protection Regulation (GDPR), which came into effect on 25 May 2018. The GDPR regulates the collection, storage, and use of personal data significantly more strictly.[2]
^Data Protection Act 1998, Part IV (Exemptions), Section 36 Archived 24 August 2007 at the Wayback Machine, Office of Public Sector Information, accessed 6 September 2007
^Ford, Michael (March 1999). "Recent legislation. The Data Protection Act 1998". Industrial Law Journal. 28: 57–60. doi:10.1093/ilj/28.1.57.
and 22 Related for: Data Protection Act 1998 information
General DataProtection Regulation (GDPR) and replaces the DataProtectionAct1998. The Act is due to be significantly amended by the DataProtection and...
19 of the Data ProtectionAct1998. The Register of fee payers is the new name of an equivalent register under the DataProtectionAct 2018, which implements...
institutions. Auditing information security Data governance DataProtectionAct1998 UK, DataProtection (Jersey) Law Directive on Privacy and Electronic...
sometimes interchangeable, it is not to be confused with the DataProtectionAct1998. The different data retention policies weigh legal and privacy concerns economics...
Cabinet Office. The Act led to the renaming of the DataProtection Commissioner (set up to administer the DataProtectionAct1998), who is now known as...
information Confidentiality club Confidential reporting system DataProtectionAct1998 Fiduciary Integrity Mature minor doctrine Media transparency Mental...
regulatory compliance (e.g., US PCI DSS, FISMA, GLBA, HIPAA; UK DataProtectionAct1998; Canada PIPEDA, Europe GDPR) Information risk management Information...
by the tracker becomes personal data as defined by the DataProtectionAct1998. The document “What is personal data? – A quick reference guide” published...
relating to individuals DataProtectionAct 2018, a United Kingdom Act of Parliament which updates the DataProtectionAct1998Data presentation architecture...
Guardian noted that it "just drafted an impressive notice under the DataProtectionAct1998 not to use my personal information for direct marketing." Similarly...
India passed its Digital Personal DataProtectionAct, 2023 in August 2023. China passed its Personal Information Protection Law (PIPL) in mid-2021, and was...
information privacy legislation (see the EU's Data Protection Directive, the UK's DataProtectionAct1998). Network sovereignty has implications for state...
the DataProtectionAct1998. The Information Commissioner's Office required the Foreign Office to sign a statement that it would comply with the Data Protection...
The Digital Millennium Copyright Act (DMCA) is a 1998 United States copyright law that implements two 1996 treaties of the World Intellectual Property...
formal complaint against Cambridge Analytica under the UK DataProtectionAct1998 to obtain his data, profile and score. Brittany Kaiser, former business...
significant milestones including the Privacy Act of 1974 in the U.S. and the European Union's DataProtection Directive of 1995. Today, international standards...
and associated addresses. RIPA and the DataProtectionAct1998 require a formal warrant before private data may be gathered by the government. Warrants...
provisions of the DataProtectionAct1998. The case is one of the leading appellate decisions in relation to the application of that Act. Mr Durant had...
the law is broken. The relevant UK laws include: DataProtectionAct1998; Freedom of Information Act 2000; Environmental Information Regulations 2004;...
Global Information