{
  "url": "https://openlegislation.uk/draft-criminal-justice-and-data-protection-protocol-no-36-regulations-2014/regulation-48",
  "json_url": "https://openlegislation.uk/draft-criminal-justice-and-data-protection-protocol-no-36-regulations-2014/regulation-48.json",
  "legislation": "ukdsi/2014/9780111122723",
  "legislation_title": "The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014",
  "legislation_url": "https://openlegislation.uk/draft-criminal-justice-and-data-protection-protocol-no-36-regulations-2014",
  "path": "regulation/48",
  "kind": "regulation",
  "number": "48",
  "heading": "Prior consultation",
  "text": "(1) A UK competent authority that wishes to process personal data in the circumstances described in paragraph (2) must consult the Commissioner before doing so.\n(2) Those circumstances are that the processing of the data will form part of a new filing system to be created where—\n(a) sensitive personal data are to be processed; or\n(b) the type of processing, in particular using new technologies, mechanisms or procedures, holds otherwise specific risks for the fundamental rights and freedoms, and in particular the privacy, of the data subject.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/ukdsi/2014/9780111122723/regulation/48",
    "retrieved_at": "2026-10-30T15:11:50.850438+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}