Contents
1Citation, commencement, extent and interpretation#
(1)These Regulations may be cited as The Data Protection Act 2018 (Code of Practice on Artificial Intelligence and Automated Decision-Making) Regulations 2026.
(2)These Regulations come into force 21 days after the day on which they are laid.
(3)These Regulations extend to England and Wales, Scotland and Northern Ireland.
(4)In these Regulations, “the 2018 Act” means the Data Protection Act 2018.
2The code of practice#
(1)The Commissioner must prepare an appropriate code of practice giving guidance as to good practice in the processing of personal data under the relevant data protection legislation in relation to—
(a)developing and using artificial intelligence, and
(2)The code of practice must include guidance as to good practice in the processing of children’s personal data.
(3)In this regulation—• “automated decision-making” means—(a) decision-making to which Article 22C(1) of the UK GDPR applies, or(b) decision-making to which section 50C(1) of the 2018 Act applies.• “relevant data protection legislation” means—(a) the UK GDPR, and(b) the 2018 Act, except Part 4 of that Act.
3Modification to panel requirements#
Section 124B of the 2018 Act applies to the preparation or amendment of the code of practice required under regulation 2 as if after subsection (7) there were inserted—“7A The panel must not consider or report on any aspect of the code relating to national security.”
Contains public sector information licensed under the Open Government Licence v3.0.