{
  "url": "https://openlegislation.uk/register-of-people-with-significant-control-regulations-2016/schedule-4/paragraph-6",
  "json_url": "https://openlegislation.uk/register-of-people-with-significant-control-regulations-2016/schedule-4/paragraph-6.json",
  "legislation": "uksi/2016/339",
  "legislation_title": "The Register of People with Significant Control Regulations 2016",
  "legislation_url": "https://openlegislation.uk/register-of-people-with-significant-control-regulations-2016",
  "path": "schedule/4/paragraph/6",
  "kind": "paragraph",
  "number": "6",
  "heading": null,
  "text": "The credit reference agency—\n(a) is carrying on in the United Kingdom ... a business comprising the furnishing of information relevant to the financial standing of individuals, being information collected by the agency for that purpose;\n(b) maintains appropriate procedures—\n(i) to ensure that an independent person can investigate and audit the measures maintained by the agency for the purposes of ensuring the security of any information within section 790ZF(2) of the Act disclosed to that agency; and\n(ii) for the purposes of ensuring that it complies with its obligations under the data protection legislation (as defined in section 3 of the Data Protection Act 2018);\n(c) has not been found guilty of an offence under—\n(i) section 1112 (false statements: basic offence) or 1112A (false statements: aggravated offence) of the Act;\n(ii) section 2 of the Fraud Act 2006 (fraud by false representation); ...\n(iii) section 47 of the Data Protection Act 1998 (failure to comply with enforcement notice) in circumstances where it has used the information within section 790ZF(2) of the Act for purposes other than those described in sub-paragraphs (a) to (e) of paragraph 8;\n(iv) section 144 of the Data Protection Act 2018 (false statements made in response to an information notice); ...\n(v) section 148 of that Act (destroying or falsifying information and documents etc); or\n(vi) section 148C of that Act (false statements made in response to interview notices);\n(d) has not been given a penalty notice under section 155 of the Data Protection Act 2018 in circumstances described in sub-paragraph (c)(iii), other than a penalty notice that has been cancelled.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Words in Sch. 4 para. 6(a) omitted (31.12.2020) by virtue of The Companies, Limited Liability Partnerships and Partnerships (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/348), reg. 2, Sch. 2 para. 14(b)(i) (with Sch. 4 para. 5) (as amended by S.I. 2020/523, regs. 1(2), 20); 2020 c. 1, Sch. 5 para. 1(1)"
    },
    {
      "type": "F",
      "label": "F2",
      "text": "Sch. 4 para. 6(b)(ii) substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 400(2) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)"
    },
    {
      "type": "F",
      "label": "F3",
      "text": "Words in Sch. 4 para. 6(b)(ii) substituted (31.12.2020) by The Companies, Limited Liability Partnerships and Partnerships (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/348), reg. 2, Sch. 2 para. 14(b)(ii) (with Sch. 4 para. 5) (as amended by S.I. 2020/523, regs. 1(2), 20); 2020 c. 1, Sch. 5 para. 1(1)"
    },
    {
      "type": "F",
      "label": "F4",
      "text": "Words in Sch. 4 para. 6(c) substituted (21.3.2024) by The Economic Crime and Corporate Transparency Act 2023 (Consequential, Supplementary and Incidental Provisions) Regulations 2024 (S.I. 2024/410), reg. 1(2), Sch. 2 para. 7(4)(a)"
    },
    {
      "type": "F",
      "label": "F5",
      "text": "Word in Sch. 4 para. 6(c)(ii) omitted (25.5.2018) by virtue of Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 400(3)(a) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)"
    },
    {
      "type": "F",
      "label": "F6",
      "text": "Sch. 4 para. 6(c)(iv)(v) inserted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 400(3)(b) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)"
    },
    {
      "type": "F",
      "label": "F7",
      "text": "Word in Sch. 4 para. 6(c) omitted (5.2.2026) by virtue of The Data (Use and Access) Act 2025 (Consequential and Other Amendments) Regulations 2025 (S.I. 2025/1331), regs. 2(2), 17(a); S.I. 2026/82, reg. 2(s)"
    },
    {
      "type": "F",
      "label": "F8",
      "text": "Sch. 4 para. 6(c)(vi) and word inserted (5.2.2026) by The Data (Use and Access) Act 2025 (Consequential and Other Amendments) Regulations 2025 (S.I. 2025/1331), regs. 2(2), 17(b); S.I. 2026/82, reg. 2(s)"
    },
    {
      "type": "F",
      "label": "F9",
      "text": "Sch. 4 para. 6(d) inserted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 400(4) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)"
    },
    {
      "type": "M",
      "label": "M1",
      "text": "2006 c.35."
    }
  ],
  "outstanding_effects": [
    {
      "type": "word omitted",
      "affecting": "uksi/2025/1331",
      "affecting_title": "The Data (Use and Access) Act 2025 (Consequential and Other Amendments) Regulations 2025"
    },
    {
      "type": "inserted",
      "affecting": "uksi/2025/1331",
      "affecting_title": "The Data (Use and Access) Act 2025 (Consequential and Other Amendments) Regulations 2025"
    }
  ],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/uksi/2016/339/schedule/4/paragraph/6",
    "retrieved_at": "2026-10-28T23:25:43.390351+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}