Legislation – Data Protection Act 2018
Changes to legislation:
Data Protection Act 2018, Section 121 is up to date with all changes known to be in force on or before 05 April 2026. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
Changes to Legislation
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
PART 5The Information Commissioner
Codes of practice
121Data-sharing code
(1)
The Commissioner must prepare a code of practice which contains—
(a)
practical guidance in relation to the sharing of personal data in accordance with the requirements of the data protection legislation, and
(b)
such other guidance as the Commissioner considers appropriate to promote good practice in the sharing of personal data.
(2)
Where a code under this section is in force, the Commissioner may prepare amendments of the code or a replacement code.
(3)
Before preparing a code or amendments under this section, the Commissioner must consult the Secretary of State and such of the following as the Commissioner considers appropriate—
(a)
trade associations;
(b)
data subjects;
(c)
persons who appear to the Commissioner to represent the interests of data subjects.
(4)
A code under this section may include transitional provision or savings.
(5)
In this section—
“good practice in the sharing of personal data” means such practice in the sharing of personal data as appears to the Commissioner to be desirable having regard to the interests of data subjects and others, including compliance with the requirements of the data protection legislation;
“the sharing of personal data” means the disclosure of personal data by transmission, dissemination or otherwise making it available;
“trade association” includes a body representing controllers or processors.