OpenLegislation

Regulation 2 The code of practice

Original text. Later amendments are not shown.

(1)

The Commissioner must prepare an appropriate code of practice giving guidance as to good practice in the processing of personal dataf1 under the relevant data protection legislation in relation to—

(a)

developing and using artificial intelligence, and

(b)

automated decision-making.

(2)

The code of practice must include guidance as to good practice in the processing of children’s personal data.

(3)

In this regulation—

  • “automated decision-making” means—

    1. (a)

      decision-making to which Article 22C(1) of the UK GDPRf2 applies, or

    2. (b)

      decision-making to which section 50C(1) of the 2018 Actf3 applies.

  • “relevant data protection legislation” means—

    1. (a)

      the UK GDPR, and

    2. (b)

      the 2018 Act, except Part 4 of that Act.

Annotations

Footnotes

f1

See section 124A(7) of the Data Protection Act 2018 for the meaning of “good practice in the processing of personal data”.

f2

Article 22C was inserted by section 80 of the Data (Use and Access) Act 2025. See section 3(10) of the Data Protection Act 2018 for the meaning of “the UK GDPR”.

f3

Section 50C was inserted by section 80 of the Data (Use and Access) Act 2025.