Change 1 Article Choose an article Title and introductory text 1 Customer data and business data 2 Power to make provision in connection with customer data 3 Customer data: supplementary 4 Power to make provision in connection with business data 5 Business data: supplementary 6 Decision-makers 7 Interface bodies 8 Enforcement of regulations under this Part 9 Restrictions on powers of investigation etc 10 Financial penalties 11 Fees 12 Levy 13 Financial assistance 14 The FCA and financial services interfaces 15 The FCA and financial services interfaces: supplementary 16 The FCA and financial services interfaces: penalties and levies 17 The FCA and co-ordination with other regulators 18 Liability in damages 19 Duty to review regulations 20 Restrictions on processing and data protection 21 Regulations under this Part: supplementary 22 Regulations under this Part: Parliamentary procedure and consultation 23 Related subordinate legislation 24 Repeal of provisions relating to supply of customer data 25 Other defined terms 26 Index of defined terms for this Part 27 Introductory 28 DVS trust framework 29 Supplementary codes 30 Withdrawal of a supplementary code 31 Review of DVS trust framework and supplementary codes 32 DVS register 33 Registration in the DVS register 34 Power to refuse registration in the DVS register 35 Registration of additional services 36 Supplementary notes 37 Addition of services to supplementary notes 38 Applications for registration, supplementary notes, etc 39 Fees for applications for registration, supplementary notes, etc 40 Duty to remove person from the DVS register 41 Power to remove person from the DVS register 42 Duty to remove services from the DVS register 43 Duty to remove supplementary notes from the DVS register 44 Duty to remove services from supplementary notes 49 Code of practice about the disclosure of information 50 Trust mark for use by registered persons 51 Power of Secretary of State to require information 52 Arrangements for third party to exercise functions 53 Report on the operation of this Part 54 Index of defined terms for this Part 55 Powers relating to verification of identity or status 56 National Underground Asset Register: England and Wales 57 Information in relation to apparatus: England and Wales 58 National Underground Asset Register: Northern Ireland 59 Information in relation to apparatus: Northern Ireland 63 Requirements to sign register 66 The 2018 Act and the UK GDPR 67 Meaning of research and statistical purposes 68 Consent to processing for the purposes of scientific research 69 Consent to law enforcement processing 70 Lawfulness of processing 71 The purpose limitation 72 Processing in reliance on relevant international law 73 Elected representatives responding to requests 74 Processing of special categories of personal data 75 Fees and reasons for responses to data subjects’ requests about law enforcement processing 76 Time limits for responding to data subjects’ requests 77 Information to be provided to data subjects 78 Searches in response to data subjects’ requests 79 Data subjects’ rights to information: legal professional privilege exemption 80 Automated decision-making 81 Data protection by design: children’s higher protection matters 82 Logging of law enforcement processing 83 General processing and codes of conduct 84 Law enforcement processing and codes of conduct 85 Transfers of personal data to third countries and international organisations 86 Safeguards for processing for research etc purposes 87 Section 86: consequential provision 88 National security exemption 89 Joint processing by intelligence services and competent authorities 90 Joint processing: consequential amendments 91 Duties of the Commission in carrying out functions 92 Codes of practice for the processing of personal data 93 Codes of practice: panels and impact assessments 94 Manifestly unfounded or excessive requests to the Commissioner 95 Analysis of performance 96 Notices from the Commissioner 97 Power of the Commissioner to require documents 98 Power of the Commissioner to require a report 99 Assessment notices: removal of OFSTED restriction 100 Interview notices 101 Penalty notices 102 Annual report on regulatory action 103 Complaints by data subjects 104 Court procedure in connection with subject access requests 105 Consequential amendments to the EITSET Regulations 106 Protection of prohibitions, restrictions and data subject’s rights 107 Regulations under the UK GDPR 108 Further minor provision about data protection 109 The PEC Regulations 110 Interpretation of the PEC Regulations 111 Duty to notify the Commissioner of personal data breach: time periods 112 Storing information in the terminal equipment of a subscriber or user 113 Emergency alerts: interpretation of time periods 114 Use of electronic mail for direct marketing by charities 115 Commissioner’s enforcement powers 116 Codes of conduct 117 The Information Commission 118 Abolition of the office of Information Commissioner 119 Transfer of functions to the Information Commission 120 Transfer of property etc to the Information Commission 121 Information standards for health and adult social care in England 122 Grant of smart meter communication licences 123 Disclosure of information to improve public service delivery to undertakings 124 Retention of information by providers of internet services in connection with death of child 125 Information for research about online safety matters 126 Retention of biometric data and recordable offences 127 Retention of pseudonymised biometric data 128 Retention of biometric data from INTERPOL 129 The eIDAS Regulation 130 Recognition of EU conformity assessment bodies 132 Recognition of overseas trust products 133 Co-operation between supervisory authority and overseas authorities 134 Time periods: the eIDAS Regulation and the EITSET Regulations 135 Economic impact assessment 136 Report on the use of copyright works in the development of AI systems 137 Progress statement 138 Creating, or requesting the creation of, purported intimate image of adult 139 Power to make consequential amendments 140 Regulations 141 Extent 142 Commencement 143 Transitional, transitory and saving provision 144 Short title Schedule 1 National Underground Asset Register (England and Wales): monetary penalties Schedule 2 National Underground Asset Register (Northern Ireland): monetary penalties Schedule 4 Lawfulness of processing: recognised legitimate interests Schedule 5 Purpose limitation: processing to be treated as compatible with original purpose Schedule 6 Automated decision-making: minor and consequential amendments Schedule 7 Transfers of personal data to third countries etc: general processing Schedule 8 Transfers of personal data to third countries etc: law enforcement processing Schedule 9 Transfers of personal data to third countries etc: minor and consequential amendments and transitional provision Schedule 10 Complaints: minor and consequential amendments Schedule 11 Further minor provision about data protection Schedule 12 Storing information in the terminal equipment of a subscriber or user Schedule 13 Privacy and electronic communications: Commissioner’s enforcement powers Schedule 14 The Information Commission Schedule 15 Information standards for health and adult social care in England Schedule 16 Grant of smart meter communication licences
What to do with it
As published
38 Applications for registration, supplementary notes, etc
(1) The Secretary of State may determine—
(a) the form of an application under section 33, 35, 36 or 37,
(b) the information to be contained in or provided with the application,
(c) the documents to be provided with the application, and
(d) the manner in which the application is to be submitted.
(2) A determination may make different provision for different purposes.
(3) The Secretary of State must publish a determination.
(4) The Secretary of State may revise a determination.
(5) If the Secretary of State revises a determination the Secretary of State must publish the determination as revised.
Your wording
Your change, as a redline
38 Applications for registration, supplementary notes, etc
(1) The Secretary of State may determine—
(a) the form of an application under section 33, 35, 36 or 37,
(b) the information to be contained in or provided with the application,
(c) the documents to be provided with the application, and
(d) the manner in which the application is to be submitted.
(2) A determination may make different provision for different purposes.
(3) The Secretary of State must publish a determination.
(4) The Secretary of State may revise a determination.
(5) If the Secretary of State revises a determination the Secretary of State must publish the determination as revised.
A proposal here is not law. Support on Solon is evidence that people want the change; the official route says what it takes to make it law.