{
  "url": "https://openlegislation.uk/data-protection-act-2018-commencement-no-1-and-transitional-and-saving-provisions-regulations-2018/regulation-2",
  "json_url": "https://openlegislation.uk/data-protection-act-2018-commencement-no-1-and-transitional-and-saving-provisions-regulations-2018/regulation-2.json",
  "legislation": "uksi/2018/625",
  "legislation_title": "The Data Protection Act 2018 (Commencement No. 1 and Transitional and Saving Provisions) Regulations 2018",
  "legislation_url": "https://openlegislation.uk/data-protection-act-2018-commencement-no-1-and-transitional-and-saving-provisions-regulations-2018",
  "path": "regulation/2",
  "kind": "regulation",
  "number": "2",
  "heading": "Provisions coming into force on 25th May 2018",
  "text": "(1) The following provisions of the 2018 Act, so far as not already in force (see section 212(2) of the 2018 Act), come into force on 25th May 2018—\n(a) section 2 (protection of personal data);\n(b) Part 2 (general processing) (including Schedules 1, 2, 3, 4, 5 and 6), other than paragraph 62 of Schedule 6;\n(c) Part 3 (law enforcement processing) (including Schedules 7 and 8);\n(d) Part 4 (intelligence services processing) (including Schedules 9, 10 and 11), other than the provisions listed in paragraph (2);\n(e) Part 5 (the Information Commissioner) (including Schedules 12, 13 and 14), other than the provisions listed in—\n(i) section 212(3) of the 2018 Act; and\n(ii) regulation 3;\n(f) Part 6 (enforcement) (including Schedules 15, 16 and 17), other than the provisions listed in section 212(3) of the 2018 Act;\n(g) Part 7 (supplementary and final provision) (including Schedules 18, 19 and 20), other than the provisions listed in—\n(i) paragraph (3); and\n(ii) regulation 3.\n(2) The provisions referred to in paragraph (1)(d) are—\n(a) section 93 (right to information);\n(b) section 102 (general obligations of the controller);\n(c) section 103 (data protection by design);\n(d) section 104 (joint controllers);\n(e) section 105 (processors);\n(f) section 108 (communication of a personal data breach).\n(3) The provisions referred to in paragraph (1)(g)(i) are the following paragraphs in Schedule 19—\n(a) paragraph 76;\n(b) paragraph 201;\n(c) paragraph 211;\n(d) paragraph 227.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/uksi/2018/625/regulation/2",
    "retrieved_at": "2026-10-28T22:57:37.582502+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}