Open at the publisher →
In force since 2023-12-18, as the publisher states.
Copy read on 2026-11-10. The page it was read from
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.
sha256 2e82ac57effd156d4f8acc14e09124d9f7fefb2427afa003b6dedffc36f7c645
4 provisions
Title and introductory text
2023 No. 1417
Retained Eu Law Reform
Data Protection
The Data Protection (Fundamental Rights and Freedoms) (Amendment) Regulations 2023
Made
18th December 2023
Coming into force in accordance with regulation 1(2)
The Secretary of State makes these Regulations in exercise of the powers conferred by section 14(1), (2) and (7) and section 20(1)(b) of the Retained EU Law (Revocation and Reform) Act 2023 (“the 2023 Act”).
The Secretary of State is a relevant national authority for the purposes of section 14(1) and (2) of the 2023 Act.
In accordance with paragraph 5(5) of Schedule 5 to the 2023 Act, a draft of this instrument has been laid before Parliament and approved by a resolution of each House of Parliament.
Propose a change1 Citation, commencement and extent
(1) These Regulations may be cited as the Data Protection (Fundamental Rights and Freedoms) (Amendment) Regulations 2023.
(2) These Regulations come into force immediately before the end of 2023, or on the day after the day on which they are made, whichever is later.
(3) These Regulations extend to England and Wales, Scotland and Northern Ireland.
Propose a change2 Amendment of the United Kingdom General Data Protection Regulation
(1) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) is amended as follows.
(2) In Article 1 (subject-matter and objectives), for paragraph (2) substitute—
2. This Regulation contributes to the protection of individuals’ fundamental rights and freedoms.
.
(3) In Article 4 (definitions), for point (28) substitute—
(28) references to fundamental rights or fundamental freedoms (however expressed) are to the Convention rights within the meaning of the Human Rights Act 1998.
.
(4) In Article 9(2)(g) (processing of special categories of personal data), omit “, respect the essence of the right to data protection”.
(5) In Article 9(2)(j) (processing of special categories of personal data), omit “, respect the essence of the right to data protection”.
(6) In Article 50(b) (international cooperation for the protection of personal data), omit “other”.
(7) In Article 85(2) (processing and freedom of expression and information), omit “the right to”.
(8) In Article 86(1) (processing and public access to official documents), omit “the right to”.
Propose a change3 Amendment of the Data Protection Act 2018
(1) The Data Protection Act 2018 is amended as follows.
(2) In section 120(1)(b) (further international role), omit “other”.
(3) In section 205 (general interpretation), for subsection (1A) substitute—
(1A) In this Act, references to fundamental rights or fundamental freedoms (however expressed) are to the Convention rights within the meaning of the Human Rights Act 1998.
.
Propose a change