OpenLegislation

Section 117 The Information CommissionI1I2

United Kingdom

(1)

The Data Protection Act 2018 is amended in accordance with subsections (2) to (5).

(2)

After section 114 insert—

“The Information Commission

The Information Commission

114A
(1)

A body corporate called the Information Commission is established.

(2)

Schedule 12A makes further provision about the Commission.”

(3)

In section 3 (terms relating to the processing of personal data), after subsection (8) insert—

“(8A)

“The Commission” means the Information Commission (see section 114A).”

(4)

In section 205(2) (references to periods of time)—

I3(a)

omit paragraph (l), and

(b)

after that paragraph insert—

“(la)

paragraph 22(6) of Schedule 12A;”.

(5)

In section 206 (index of defined expressions), in the Table, at the appropriate place insert—

“

the Commissionsection 3

”.

(6)

Schedule 14 to this Act—

(a)

inserts Schedule 12A to the Data Protection Act 2018, and

(b)

makes transitional provision relating to—

(i)

the person who holds the office of Information Commissioner immediately before the day on which Schedule 14 comes into force, and

(ii)

consultation about certain appointments.

Annotations

Commencement

I1

S. 117 not in force at Royal Assent, see s. 142(1)

I2

S. 117 (except s. 117(4)(a)) in force at 20.8.2025 by S.I. 2025/904, reg. 2(r)

I3

S. 117(4)(a) in force at 30.9.2026 by S.I. 2026/1015, reg. 2(a) (with reg. 3)