16 September 2019
The Data Protection Act 2018 (Commencement No 2) Regulations 2019 (SI 2019/1188) bring into force the following provisions of Part 4 of the Data Protection Act 2018, which place obligations on controllers and processors who carry out intelligence services processing -
Section 93 (right to information)
Section 102 (general obligations of the controller)
Section 103 (data protection by design)
Section 104 (joint controllers)
Section 105 (processors)
Section 108 (communication of a personal data breach).
These sections are in force from 16 September 2019.