Section 43 — Data Protection Act 2018: Overview and scope

Overview and scope 43 1 This Chapter—

a imposes general duties on the controller to make information available (see sections 44 and 45A );

b confers a right of access by the data subject (see sections 45 and 45A );

c confers rights on the data subject with respect to the rectification of personal data and the erasure of personal data or the restriction of its processing (see sections 46 to 48);

d regulates automated decision-making (see sections 50A to 50D );

e makes supplementary provision (see sections 51 to 54).

2 This Chapter applies only in relation to the processing of personal data for a law enforcement purpose.

3 But sections 44 to 48 do not apply in relation to the processing of relevant personal data in the course of a criminal investigation or criminal proceedings, including proceedings for the purpose of executing a criminal penalty.

4 In subsection (3), “ relevant personal data ” means personal data contained in a judicial decision or in other documents relating to the investigation or proceedings which are created by or on behalf of a court or other judicial authority.

5 In this Chapter, “ the controller ”, in relation to a data subject, means the controller in relation to personal data relating to the data subject.