{
  "url": "https://openlegislation.uk/data-protection-act-2018-code-of-practice-on-artificial-intelligence-and-automated-decision-making-regulations-2026/regulation-2",
  "json_url": "https://openlegislation.uk/data-protection-act-2018-code-of-practice-on-artificial-intelligence-and-automated-decision-making-regulations-2026/regulation-2.json",
  "legislation": "uksi/2026/425",
  "legislation_title": "The Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026",
  "legislation_url": "https://openlegislation.uk/data-protection-act-2018-code-of-practice-on-artificial-intelligence-and-automated-decision-making-regulations-2026",
  "path": "regulation/2",
  "kind": "regulation",
  "number": "2",
  "heading": "The code of practice",
  "text": "(1) The Commissioner must prepare an appropriate code of practice giving guidance as to good practice in the processing of personal data under the relevant data protection legislation in relation to—\n(a) developing and using artificial intelligence, and\n(b) automated decision-making.\n(2) The code of practice must include guidance as to good practice in the processing of children’s personal data.\n(3) In this regulation—\n“automated decision-making” means—\n(a) decision-making to which Article 22C(1) of the UK GDPR applies, or\n(b) decision-making to which section 50C(1) of the 2018 Act applies.\n“relevant data protection legislation” means—\n(a) the UK GDPR, and\n(b) the 2018 Act, except Part 4 of that Act.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "footnote",
      "label": "f1",
      "text": "See section 124A(7) of the Data Protection Act 2018 for the meaning of “good practice in the processing of personal data”."
    },
    {
      "type": "footnote",
      "label": "f2",
      "text": "Article 22C was inserted by section 80 of the Data (Use and Access) Act 2025. See section 3(10) of the Data Protection Act 2018 for the meaning of “the UK GDPR”."
    },
    {
      "type": "footnote",
      "label": "f3",
      "text": "Section 50C was inserted by section 80 of the Data (Use and Access) Act 2025."
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/uksi/2026/425/regulation/2",
    "retrieved_at": "2026-10-28T21:02:34.279500+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}