Section 186 Protection of data subject’s rightsI1

(1)

An enactment or rule of law prohibiting or restricting the disclosure of information, or authorising the withholding of information, does not remove or restrict the obligations and rights provided for in the provisions listed in subsection (2) F1....

(2)

The provisions providing obligations and rights are—

(a)

Chapter III of the F2UK GDPR (rights of the data subject),

(b)

Chapter 3 of Part 3 of this Act (law enforcement processing: rights of the data subject), and

(c)

Chapter 3 of Part 4 of this Act (intelligence services processing: rights of the data subject).

(2A)

F3Subsection (1) does not apply—

(a)

to an enactment contained in, or made under, a provision listed in subsection (2),

(b)

to an enactment contained in, or made under, a provision listed in subsection (3),

(c)

to the extent that an enactment makes express provision to the contrary referring to this section or to a provision listed in subsection (2), or

(d)

to the extent that subsection (1) is disapplied by section 186A(3).

(3)

The F4provisions referred to in subsection (2A)(b) are—

(a)

in Chapter 2 of Part 2 of this Act, sections 15 and 16 and Schedules 2, 3 and 4,

(b)

in Chapter 3 of Part 2 of this Act, sections F5... 24, 25 and 26,

(c)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(ca)

F7in Part 3 of this Act, section 78A, and

(d)

in Part 4 of this Act, Chapter 6 .

Annotations

Textual amendments

F1: Words in s. 186(1) omitted (20.8.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 106(4)(b), 142(1); S.I. 2025/904, reg. 2(k)
F2: Words in s. 186(2)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 80(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
F3: S. 186(2A) inserted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 106(4)(c), 142(1); S.I. 2025/904, reg. 2(k)
F4: Words in s. 186(3) substituted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 106(4)(d)(i), 142(1); S.I. 2025/904, reg. 2(k)
F5: Word in s. 186(3)(b) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 80(3) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
F6: S. 186(3)(c) omitted (20.8.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 106(4)(d)(ii), 142(1); S.I. 2025/904, reg. 2(k)
F7: S. 186(3)(ca) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(10), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)
F8: S. 186 heading substituted (20.8.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 106(4)(a), 142(1); S.I. 2025/904, reg. 2(k)

Commencement

I1: S. 186 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)