Propose a change

Data Protection Act 2018

Write the words of this act the way you think they should read. Solon shows your change as a redline against the published text and pins it to that exact text, so it can never be applied to wording you did not see.

Change 1

What to do with it
As published

34 Overview and general duty of controller

(1) This Chapter sets out the six data protection principles as follows— (a) section 35(1) sets out the first data protection principle (requirement that processing be lawful and fair); (b) section 36(1) sets out the second data protection principle (requirement that purposes of processing be specified, explicit and legitimate); (c) section 37 sets out the third data protection principle (requirement that personal data be adequate, relevant and not excessive); (d) section 38(1) sets out the fourth data protection principle (requirement that personal data be accurate and kept up to date); (e) section 39(1) sets out the fifth data protection principle (requirement that personal data be kept for no longer than is necessary); (f) section 40 sets out the sixth data protection principle (requirement that personal data be processed in a secure manner). (2) In addition— (a) each of sections 35, 36, 38 and 39 makes provision to supplement the principle to which it relates, (aa) section 40A makes provision about processing carried out in reliance on the consent of the data subject, and (b) sections 41 and 42 make provision about the safeguards that apply in relation to certain types of processing. (3) The controller in relation to personal data is responsible for, and must be able to demonstrate, compliance with this Chapter.

Your change, as a redline

34 Overview and general duty of controller

(1) This Chapter sets out the six data protection principles as follows— (a) section 35(1) sets out the first data protection principle (requirement that processing be lawful and fair); (b) section 36(1) sets out the second data protection principle (requirement that purposes of processing be specified, explicit and legitimate); (c) section 37 sets out the third data protection principle (requirement that personal data be adequate, relevant and not excessive); (d) section 38(1) sets out the fourth data protection principle (requirement that personal data be accurate and kept up to date); (e) section 39(1) sets out the fifth data protection principle (requirement that personal data be kept for no longer than is necessary); (f) section 40 sets out the sixth data protection principle (requirement that personal data be processed in a secure manner). (2) In addition— (a) each of sections 35, 36, 38 and 39 makes provision to supplement the principle to which it relates, (aa) section 40A makes provision about processing carried out in reliance on the consent of the data subject, and (b) sections 41 and 42 make provision about the safeguards that apply in relation to certain types of processing. (3) The controller in relation to personal data is responsible for, and must be able to demonstrate, compliance with this Chapter.

One line that says what changes, such as "Halve the dog tax".

Who it helps, what it costs, what it fixes. It is what persuades people to support it.

A proposal here is not law. Support on Solon is evidence that people want the change; the official route says what it takes to make it law.

Sign in to file your proposal. What you have written stays on this page.

Sign in to file it

Think it through

Ask what your change would do, who would gain and who would bear a cost, and where something like it is already law. The assistant reads your draft as it stands, cites the law and the studies it finds, and takes no side. What you file stays yours.

Questions to start with
Think it through
Legal information from the published text, not advice for your case. Check the sources. Find a law · What the register holds