Data Protection (Amendment) Act 2003

Amendment of section 13 (codes of practice) of Principal Act.

14.—(1) Section 13 of the Principal Act is amended—

(a)  by the substitution of the following subsection for subsection (2):

“(2) The Commissioner shall—

(a)  where a code of practice (referred to subsequently in this section as a code) so prepared is submitted to him or her for consideration, consider the code and, after such consultation with such data subjects or persons representing data subjects and with the relevant trade associations or other bodies aforesaid as appears to him or her to be appropriate—

(i)  if he or she is of opinion that the code provides for the data subjects concerned a measure of protection with regard to personal data relating to them that conforms with that provided for by section 2, sections 2A to 2D (inserted by the Act of 2003) and sections 3 and 4 (other than subsection (8)) and 6 of this Act, approve of the code and encourage its dissemination to the data controllers concerned, and

(ii) in any event notify the association or body concerned of his or her decision to approve or not to approve the code,

(b)  where he or she considers it necessary or desirable to do so and after such consultation with any trade associations or other bodies referred to in subsection (1) of this section having an interest in the matter and data subjects or persons representing data subjects as he or she considers appropriate, prepare, and arrange for the dissemination to such persons as he or she considers appropriate of, codes of practice for guidance as to good practice in dealing with personal data, and subsection (3) of this section shall apply to a code of practice prepared under this subsection as it applies to a code,

(c)  in such manner and by such means as he or she considers most effective for the purposes of this paragraph, promote the following of good practice by data controllers and, in particular, so perform his or her functions under this Act as to promote compliance with this Act by data controllers,

(d)  arrange for the dissemination in such form and manner as he or she considers appropriate of such information as appears to him or her to be expedient to give to the public about the operation of this Act, about the practices in processing of personal data (including compliance with the requirements of this Act) that appear to the Commissioner to be desirable having regard to the interests of data subjects and other persons likely to be affected by such processing and about other matters within the scope of his or her functions under this Act, and may give advice to any person in relation to any of those matters.”,

and

(b)  by the insertion of the following subsections after subsection (4):

“(5) The Commissioner shall be paid by a person in relation to whom a service is provided under this section such fee (if any) as may be prescribed and different fees may be prescribed in relation to different such services and different classes of persons.

(6) In proceedings in any court or other tribunal, any provision of a code, or a code of practice, approved under subsection (3) of this section that appears to the court or other tribunal concerned to be relevant to the proceedings may be taken into account in determining the question concerned.”.

(2) A code of practice approved under subsection (2) of the said section 13 and in force immediately before the commencement of this section shall continue in force after such commencement as if approved under subsection (2) (inserted by this section) of section 13 of the Principal Act.