(1) This section is about cases in which subordinate legislation, other than regulations under this Part, contains provision described in section 2(1) to (4) or 4(1) to (4) (and such provision is referred to in this section as “ related subordinate legislation ”).
(2) The regulation-making powers under this Part may be exercised so as to make, in connection with the related subordinate legislation, any provision that they could be exercised to make as part of, or in connection with, provision made under section 2(1) to (4) or, as appropriate, section 4(1) to (4).
(3) In this Part, references to “data regulations” include regulations made in reliance on subsection (2) to the extent that they make provision described in sections 2 to 7.
(4) For the purposes of determining whether subordinate legislation contains provision described in sections 2(1) to (4) or 4(1) to (4), references in those sections to something specified are to be read as including something specified by or under any subordinate legislation.
(5) In this section, “ subordinate legislation ” has the same meaning as in the Interpretation Act 1978 (see section 21 of that Act).
I45 S. 23 in force at Royal Assent for specified purposes, see s. 142(1)(2) (h)
I46 S. 23 in force at 20.8.2025 in so far as not already in force by S.I. 2025/904 , reg. 2(a)
24 Repeal of provisions relating to supply of customer data U.K.
Omit sections 89 to 91 of the Enterprise and Regulatory Reform Act 2013 (supply of customer data).
I47 S. 24 not in force at Royal Assent, see s. 142(1)
I48 S. 24 in force at 20.8.2025 by S.I. 2025/904 , reg. 2(a)
25 Other defined terms U.K.
(1) In this Part—
“ application programming interface ” means a facility for allowing software to make use of facilities contained in other software;
“ dashboard service ” means an electronic communications service by means of which information may be requested by and provided to a person;
“ digital content ” means data which is produced and supplied in digital form;
“ electronic communications service ” has the meaning given by section 32 of the Communications Act 2003;
“ goods ” includes water, gas and electricity (however supplied);
“ micro business ” has the meaning given by section 33 of the Small Business, Enterprise and Employment Act 2015, read with any regulations under that section;
“ primary legislation ” means— (a) an Act of Parliament; (b) an Act of the Scottish Parliament; (c) a Measure or Act of Senedd Cymru; (d) Northern Ireland legislation;
“ processing ” has the same meaning as in the Data Protection Act 2018 (see section 3(4) of that Act) and related terms are to be interpreted accordingly;
“ public authority ” means a person whose functions— (a) are of a public nature, or (b) include functions of that nature;
“ small business ” has the meaning given by section 33 of the Small Business, Enterprise and Employment Act 2015, read with any regulations under that section;
“ specified ” means specified, or of a description specified, by regulations under this Part, or in exercise of a power conferred by such regulations, except to the extent otherwise provided in this Part;
“ third party recipient ” means— (a) in section 3, a third party in relation to customer data (see section 2(2)), (b) in sections 4 and 5, a third party recipient in relation to business data (see section 4(2)), and (c) in other sections, a third party recipient in relation to customer data or business data (see sections 2(2) and 4(2)).
(2) In this Part, references to doing something “in the course of a business” include doing something in the course of—