“ (ca) the data subject’s right to make a complaint to the controller under section 164A, ” .
I453 Sch. 10 para. 12 not in force at Royal Assent, see s. 142(1)
I454 Sch. 10 para. 12 in force at 19.6.2026 by S.I. 2026/82 , reg. 3(b) (with reg. 7 )
13 (1) Section 48 (rights to rectification, to erasure or to restriction of processing: supplementary) is amended as follows.
(2) In subsection (1)(b)—
(a) after sub-paragraph (ii) insert—
“ (iia) of the data subject’s right to make a complaint to the controller under section 164A, ” , and
(b) in sub-paragraph (iii), after “Commissioner” insert “under section 165” .
(3) In subsection (4)—
(a) after paragraph (b) insert—
“ (ba) of the data subject’s right to make a complaint to the controller under section 164A, ” , and
(b) in paragraph (c), after “Commissioner” insert “under section 165” .
I455 Sch. 10 para. 13 not in force at Royal Assent, see s. 142(1)
I456 Sch. 10 para. 13 in force at 19.6.2026 by S.I. 2026/82 , reg. 3(b) (with reg. 7 )
14 In section 93(1)(e) (right to information), after “Commissioner”, in the first place it occurs, insert “under section 165” .
I457 Sch. 10 para. 14 not in force at Royal Assent, see s. 142(1)
I458 Sch. 10 para. 14 in force at 19.6.2026 by S.I. 2026/82 , reg. 3(b) (with reg. 7 )
15 In section 94(2)(f) (right of access), after “Commissioner”, in the first place it occurs, insert “under section 165” .
I459 Sch. 10 para. 15 not in force at Royal Assent, see s. 142(1)
I460 Sch. 10 para. 15 in force at 19.6.2026 by S.I. 2026/82 , reg. 3(b) (with reg. 7 )
16 (1) Section 149 (enforcement notices) is amended as follows.
(2) In subsection (1), for “or (5)” substitute “, (5) or (5A)” .
(3) After subsection (5) insert—
“ (5A) The fifth type of failure is where a controller has failed, or is failing, to comply with section 164A or with regulations under section 164B. ”
(4) In subsection (6), for “or (5)” substitute “, (5) or (5A)” .
I461 Sch. 10 para. 16 not in force at Royal Assent, see s. 142(1)