(1) Schedule 1 provides for certain provisions of Parts 5 to 7 of the Data Protection Act 2018 to apply with modifications for the purposes of enforcing these Regulations.
(2) In regulations 32 and 33, “ enforcement functions ” means the functions of the Information Commissioner under those provisions, as applied by that Schedule. ”
(6) Omit regulation 31A (third party information notices).
(7) Omit regulation 31B (appeals against third party information notices).
(8) For Schedule 1 substitute the Schedule set out in Schedule 13 to this Act.
(9) In paragraph 58(1) of Schedule 20 to the Data Protection Act 2018 (transitional provision relating to the PEC Regulations) for “regulations 2, 31 and 31B of, and Schedule 1 to,” substitute “regulation 2 of” .
(10) A requirement to consult under regulation 5C(15) of the PEC Regulations (inserted by subsection (4)(b) of this section) may be satisfied by consultation undertaken before the day on which this Act is passed.
I212 S. 115 in force at Royal Assent for specified purposes, see s. 142(1)(2) (h)
I213 S. 115 in force at 5.2.2026 in so far as not already in force by S.I. 2026/82 , reg. 2(y) (with regs. 8-11 )
116 Codes of conduct U.K.
(1) The PEC Regulations are amended as follows.
(2) After regulation 32 insert—
“ 32A. Codes of conduct
(1) The Commissioner must encourage representative bodies to produce codes of conduct intended to contribute to compliance with these Regulations.
(2) Under paragraph (1), the Commissioner must encourage representative bodies to produce codes which take account of, among other things, the specific features of different sectors.
(3) A code of conduct described in paragraph (1) may, for example, make provision with regard to—
(a) rights and obligations under these Regulations;
(b) out-of-court proceedings and other dispute resolution procedures for resolving disputes arising in connection with these Regulations.
(4) The Commissioner must encourage representative bodies to submit codes of conduct described in paragraph (1) to the Commissioner in draft.
(5) Where a representative body does so, the Commissioner must—
(a) provide the representative body with an opinion on whether the code correctly reflects the requirements of these Regulations,
(6) The Commissioner may only approve a code if, among other things—
(a) the code contains a mechanism for monitoring whether persons who undertake to apply the code comply with its provisions, and
(b) in relation to persons other than public bodies, the mechanism involves monitoring by a body which is accredited for that purpose by the Commissioner under regulation 32B.
(7) In relation to amendments of a code of conduct that is for the time being approved under this regulation—
(a) paragraphs (4) and (5) apply as they apply in relation to a code, and