1 Overview
1 Overview

(1)     This Act makes provision about the processing of personal data.

(2)     Most processing of personal data is subject to the GDPR [UK GDPR].

(3)     Part 2 supplements the GDPR (see Chapter 2) and applies a broadly equivalent regime to certain types of processing to which the GDPR does not apply (see Chapter 3) [UK GDPR].

(4)     Part 3 makes provision about the processing of personal data by competent authorities for law enforcement purposes and implements the Law Enforcement Directive.

(5)     Part 4 makes provision about the processing of personal data by the intelligence services.

(6)     Part 5 makes provision about the Information Commissioner.

(7)     Part 6 makes provision about the enforcement of the data protection legislation.