{
  "url": "https://openlegislation.uk/data-use-and-access-act-2025-commencement-no-3-and-transitional-and-saving-provisions-regulations-2025/regulation-4",
  "json_url": "https://openlegislation.uk/data-use-and-access-act-2025-commencement-no-3-and-transitional-and-saving-provisions-regulations-2025/regulation-4.json",
  "legislation": "uksi/2025/996",
  "legislation_title": "The Data (Use and Access) Act 2025 (Commencement No. 3 and Transitional and Saving Provisions) Regulations 2025",
  "legislation_url": "https://openlegislation.uk/data-use-and-access-act-2025-commencement-no-3-and-transitional-and-saving-provisions-regulations-2025",
  "path": "regulation/4",
  "kind": "regulation",
  "number": "4",
  "heading": "Transitional and saving provisions relating to the national security exemption",
  "text": "(1) Section 88 of the 2025 Act does not affect the application of—\n(a) Chapter 3 of Part 3 of the 2018 Act, in a case in which a controller received a request under a section of that Chapter before the relevant time;\n(b) section 51 (exercise of rights through the Commissioner) of the 2018 Act, in a case in which the Commissioner received a request under that section before the relevant time;\n(c) sections 67 and 68 (obligations relating to personal data breaches) of the 2018 Act, in a case in which a personal data breach (within the meaning given by section 33(2) of the 2018 Act) occurred before the relevant time;\n(d) section 119 (inspection of personal data) of the 2018 Act, in a case in which a controller received written notice under that section before the relevant time;\n(e) Schedule 13 (other general functions of the Commissioner) to the 2018 Act, in a case in which the Commissioner—\n(i) commenced enforcement action pursuant to paragraph 1(1)(a) of that Schedule, before the relevant time; or\n(ii) received information under paragraph 1(1)(g) of that Schedule, before the relevant time;\n(f) sections 142 to 154 (enforcement) of, and Schedule 15 (powers of entry and inspection) to, the 2018 Act, in relation to any of the following which is received by a controller before the relevant time—\n(i) an information notice;\n(ii) an assessment notice;\n(iii) an enforcement notice;\n(g) section 173 (alteration of personal data to prevent disclosure) of the 2018 Act, in a case in which a controller received a request pursuant to that section before the relevant time;\n(h) section 187 (representation of data subjects) of the 2018 Act, in a case in which, before the relevant time, a body or other organisation authorised to act on behalf of a data subject in accordance with that section—\n(i) made a complaint to the Commissioner under section 165 (complaints by data subjects);\n(ii) made an application to the Tribunal under section 166 (orders to progress complaints);\n(iii) made an application to the court under section 167 (compliance orders); or\n(iv) brought judicial review proceedings.\n(2) Section 88 of the 2025 Act does not affect the application of section 79(2) to (13) of the 2018 Act to a certificate issued under section 79(1) before the relevant time.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "footnote",
      "label": "f1",
      "text": "Section 67 was amended by S.I. 2019/419."
    },
    {
      "type": "footnote",
      "label": "f2",
      "text": "Schedule 13 was amended by S.I. 2019/419."
    },
    {
      "type": "footnote",
      "label": "f3",
      "text": "Sections 142 and 143 were amended by the Data (Use and Access) Act 2025, section 97 and S.I. 2019/419. Sections 145 and 148 were amended by the Data (Use and Access) Act 2025, section 97."
    },
    {
      "type": "footnote",
      "label": "f4",
      "text": "Section 173 was amended by S.I. 2019/419."
    },
    {
      "type": "footnote",
      "label": "f5",
      "text": "Section 187 was amended by S.I. 2019/419."
    },
    {
      "type": "footnote",
      "label": "f6",
      "text": "Section 165 was amended by S.I. 2019/419."
    },
    {
      "type": "footnote",
      "label": "f7",
      "text": "Section 166 was amended by S.I. 2019/419."
    },
    {
      "type": "footnote",
      "label": "f8",
      "text": "Section 167 was amended by S.I. 2019/419."
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/uksi/2025/996/regulation/4",
    "retrieved_at": "2026-10-28T21:11:51.404479+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}