Section 139 — Data Protection Act 2018: Reporting to Parliament

Reporting to Parliament 139 1 The Commissioner must—

a produce a general report on the carrying out of the Commissioner's functions annually, b arrange for it to be laid before Parliament, and c publish it. 1A In connection with the Commissioner’s functions under the data protection legislation, the report must contain (among other things)—

a a review of what the Commissioner has done during the reporting period to comply with the duties under—

i sections 120A and 120B, ii section 108 of the Deregulation Act 2015, and iii section 21 of the Legislative and Regulatory Reform Act 2006, including a review of the operation of the strategy prepared and published under section 120C;

b a review of what the Commissioner has done during the reporting period to comply with the duty under section 120D. 1B In subsection (1A), “ the reporting period ” means the period to which the report relates. 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2A The report under this section may include the annual report under section 161A.

3 The Commissioner may produce other reports relating to the carrying out of the Commissioner's functions and arrange for them to be laid before Parliament.