Legislation – Data Protection Act 2018
Changes to legislation:
Data Protection Act 2018, Section 120 is up to date with all changes known to be in force on or before 04 April 2026. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
Changes to Legislation
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
PART 5The Information Commissioner
International role
120Further international role
(1)
The Commissioner must, in relation to third countries and international organisations, take appropriate steps to—
(a)
develop international co-operation mechanisms to facilitate the effective enforcement of legislation for the protection of personal data;
(b)
provide international mutual assistance in the enforcement of legislation for the protection of personal data, subject to appropriate safeguards for the protection of personal data and F1… fundamental rights and freedoms;
(c)
engage relevant stakeholders in discussion and activities aimed at furthering international co-operation in the enforcement of legislation for the protection of personal data;
(d)
promote the exchange and documentation of legislation and practice for the protection of personal data, including legislation and practice relating to jurisdictional conflicts with third countries.
(2)
Subsection (1) applies only in connection with the processing of personal data to which the F2UK GDPR does not apply; for the equivalent duty in connection with the processing of personal data to which the F2UK GDPR applies, see Article 50 of the F2UK GDPR (international co-operation for the protection of personal data).
F3(2A)
The Commissioner may contribute to the activities of international organisations with data protection functions.
(3)
The Commissioner must carry out data protection functions which the Secretary of State directs the Commissioner to carry out for the purpose of enabling Her Majesty’s Government in the United Kingdom to give effect to an international obligation of the United Kingdom.
(4)
The Commissioner may provide an authority carrying out data protection functions under the law of a British overseas territory with assistance in carrying out those functions.
(5)
The Secretary of State may direct that assistance under subsection (4) is to be provided on terms, including terms as to payment, specified or approved by the Secretary of State.
(6)
In this section—
“data protection functions” means functions relating to the protection of individuals with respect to the processing of personal data;
“mutual assistance in the enforcement of legislation for the protection of personal data” includes assistance in the form of notification, complaint referral, investigative assistance and information exchange;
“third country” means a country or territory F4outside the United Kingdom.
(7)
Section 3(14)(c) does not apply to references to personal data and the processing of personal data in this section.