Legislation – Data Protection Act 2018

F2… enables a data subject to authorise a body or other organisation which meets the conditions set out in F3subsections (3) and (4) to exercise the data subject’s rights under Articles 77, 78 and 79 of the F4UK GDPR (rights to lodge complaints and to an effective judicial remedy) on the data subject’s behalf, and

F5also authorises such a body or organisation to exercise the data subject’s rights under Article 82 of the F6UK GDPR (right to compensation).

rights under section 165(2) F8and (4)(d) (complaints to the Commissioner);

rights under section 166(2) (orders for the Commissioner to progress complaints);

rights under section 167(1) (compliance orders);

the right to bring judicial review proceedings against the Commissioner.

is required (after payment of outgoings) to apply the whole of its income and any capital it expends for charitable or public purposes,

is prohibited from directly or indirectly distributing amongst its members any part of its assets (otherwise than for charitable or public purposes), and

has objectives which are in the public interest.