Propose a change

Data Protection Act 2018

Write the words of this act the way you think they should read. Solon shows your change as a redline against the published text and pins it to that exact text, so it can never be applied to wording you did not see.

Change 1

What to do with it
As published

62 Logging

(1) A controller (or, where personal data is processed on behalf of the controller by a processor, the processor) must keep logs for at least the following processing operations in automated processing systems— (a) collection; (b) alteration; (c) consultation; (d) disclosure (including transfers); (e) combination; (f) erasure. (2) The logs of consultation must make it possible to establish— (a) the ... date and time of, the consultation, and (b) so far as possible, the identity of the person who consulted the data. (3) The logs of disclosure must make it possible to establish— (a) the ... date and time of, the disclosure, and (b) so far as possible— (i) the identity of the person who disclosed the data, and (ii) the identity of the recipients of the data. (4) The logs kept under subsection (1) may be used only for one or more of the following purposes— (a) to verify the lawfulness of processing; (b) to assist with self-monitoring by the controller or (as the case may be) the processor, including the conduct of internal disciplinary proceedings; (c) to ensure the integrity and security of personal data; (d) the purposes of criminal proceedings. (5) The controller or (as the case may be) the processor must make the logs available to the Commission on request.

Your change, as a redline

62 Logging

(1) A controller (or, where personal data is processed on behalf of the controller by a processor, the processor) must keep logs for at least the following processing operations in automated processing systems— (a) collection; (b) alteration; (c) consultation; (d) disclosure (including transfers); (e) combination; (f) erasure. (2) The logs of consultation must make it possible to establish— (a) the ... date and time of, the consultation, and (b) so far as possible, the identity of the person who consulted the data. (3) The logs of disclosure must make it possible to establish— (a) the ... date and time of, the disclosure, and (b) so far as possible— (i) the identity of the person who disclosed the data, and (ii) the identity of the recipients of the data. (4) The logs kept under subsection (1) may be used only for one or more of the following purposes— (a) to verify the lawfulness of processing; (b) to assist with self-monitoring by the controller or (as the case may be) the processor, including the conduct of internal disciplinary proceedings; (c) to ensure the integrity and security of personal data; (d) the purposes of criminal proceedings. (5) The controller or (as the case may be) the processor must make the logs available to the Commission on request.

One line that says what changes, such as "Halve the dog tax".

Who it helps, what it costs, what it fixes. It is what persuades people to support it.

A proposal here is not law. Support on Solon is evidence that people want the change; the official route says what it takes to make it law.

Sign in to file your proposal. What you have written stays on this page.

Sign in to file it

Think it through

Ask what your change would do, who would gain and who would bear a cost, and where something like it is already law. The assistant reads your draft as it stands, cites the law and the studies it finds, and takes no side. What you file stays yours.

Questions to start with
Think it through
Legal information from the published text, not advice for your case. Check the sources. Find a law · What the register holds