OpenLegislation

The Data Protection Act 2018 (Competent Authorities) Regulations 2026

Draft. This instrument was laid in draft and may differ from the one made. Look for the made version under its title.

Draft 2026, ISBN 9780348288322

Original text. legislation.gov.uk does not revise statutory instruments, so later amendments are not shown here. Changes made to it are listed under each provision when known.

Draft Regulations laid before Parliament under sections 30(5) and 182(7) of the Data Protection Act 2018, for approval by resolution of each House of Parliament.

DATA PROTECTION

Made ***

Coming into force in accordance with regulation 1(2)

The Secretary of State makes these Regulations in exercise of the powers conferred by section 30(3)(a) of the Data Protection Act 2018f1.

In accordance with sections 30(5) and 182(7) of that Actf2, a draft of these Regulations has been laid before Parliament and approved by a resolution of each House of Parliament.

Annotations to the whole text

Footnotes

f1

2018 c. 12.

f2

Section 182(7) was amended by the Data (Use and Access) Act 2025 (c. 18), Schedule 9 (Part 1), paragraph 22(4).

Contents

  1. 1Citation, commencement and extent
  2. 2Competent authority
  3. Signature
  4. Explanatory note

1Citation, commencement and extent

(1)

These Regulations may be cited as the Data Protection Act 2018 (Competent Authorities) Regulations 2026.

(2)

These Regulations come into force on the twenty-first day after the day on which they are made.

(3)

These Regulations extend to England and Wales, Scotland and Northern Ireland.

2Competent authority

In Schedule 7 to the Data Protection Act 2018f1 (competent authoritiesf2), after paragraph 20 insert—

“20A

The College of Policing.”.

Signature

Minister of State

Home Office

Explanatory note

(This note is not part of the Regulations)

These Regulations add the College of Policing to the list of competent authorities in Schedule 7 to the Data Protection Act 2018 (c. 12) (“the 2018 Act”).

This brings the processing of personal data by the College of Policing within scope of Part 3 (law enforcement processing) of the 2018 Act.

A full impact assessment has not been produced for this instrument as no, or no significant, impact on the private, voluntary or public sector is foreseen.