The Data Protection Act 2018 (Commencement No. 2) Regulations 2019 SI 2019/1188 have been made. They bring into force the remaining provisions of Part 4 of the Data Protection Act 2018, which relates to data processing by the intelligence services, so far as they were not already in force. The Regulations come into force on 16 September and include:
- section 93 (right to information)
- section 102 (general obligations of the controller)
- section 103 (data protection by design)
- section 104 (joint controllers)
- section 105 (processors)
- section 108 (communication of a personal data breach)
Part 4 of the 2018 Act was brought into force on 25th May 2018 by the Data Protection Act 2018 (Commencement No. 1 and Transitional and Saving provisions) Regulations 2018 (SI 2018/625), with the exception of the sections specified in regulation 2 of the Regulations.
Section 212(2)(f) of the 2018 Act brought into force on 23rd May 2018 any provision of the 2018 Act so far as it conferred powers to make regulations or Tribunal Procedure Rules or it was otherwise necessary to enable the exercise of such a power.
