Legislation – Data Protection Act 2018
Changes to legislation:
Data Protection Act 2018, Section 139 is up to date with all changes known to be in force on or before 03 April 2026. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.![]()
Changes to Legislation
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
PART 5The Information Commissioner
Reports etc
139Reporting to Parliament
(1)
The Commissioner must—
(a)
produce a general report on the carrying out of the Commissioner’s functions annually,
(b)
arrange for it to be laid before Parliament, and
(c)
publish it.
F1(1A)
In connection with the Commissioner’s functions under the data protection legislation, the report must contain (among other things)—
(a)
a review of what the Commissioner has done during the reporting period to comply with the duties under—
(i)
sections 120A and 120B,
(ii)
section 108 of the Deregulation Act 2015, and
(iii)
section 21 of the Legislative and Regulatory Reform Act 2006,
including a review of the operation of the strategy prepared and published under section 120C;
(b)
a review of what the Commissioner has done during the reporting period to comply with the duty under section 120D.
(1B)
In subsection (1A), “the reporting period” means the period to which the report relates.
F2(2)
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F3(2A)
The report under this section may include the annual report under section 161A.
(3)
The Commissioner may produce other reports relating to the carrying out of the Commissioner’s functions and arrange for them to be laid before Parliament.