United Kingdom: UK Data Protection and Digital Information Bill

1. PART 1
2. PART 2
3. PART 3
4. PART 4
5. PART 5
6. PART 6
7. Schedule 1 — Lawfulness of processing: recognised legitimate interests
8. Schedule 2 — Purpose limitation: processing to be treated as compatible with
9. Schedule 3 — Automated decision-making: consequential amendments
10. Schedule 4 — Obligations of controllers and processors: consequential
11. Schedule 5 — Transfers of personal data to third countries etc: general
12. Schedule 6 — Transfers of personal data to third countries etc: law
13. Schedule 7 — Transfers of personal data to third countries etc: minor and
14. Part 1 — Minor and Consequential Amendments
15. Part 2 — Transitional provision
16. Schedule 8 — Complaints: minor and consequential amendments
17. Schedule 9 — Data protection: minor amendments
18. Schedule 10 — Privacy and electronic communications: Commissioner’s
19. Schedule 11 — Power to require information for social security purposes
20. Part 1 — Social Security Administration Act 1992
21. Part 2 — Social Security Administration (Northern Ireland) Act 1992
22. Part 3 — Proceeds of Crime Act 2002
23. Schedule 12 — Registers of births and deaths: minor and consequential
24. Part 1 — Amendments of the Births and Deaths Registration Act 1953
25. Part 2 — Amendments of other legislation
26. Schedule 13 — National Underground Asset Register: monetary penalties
27. Schedule 14 — Information standards for health and adult social care in
28. Schedule 15 — The Information Commission
29. Part 1—Data protection
30. Article 23(1)(c) to (j) and is authorised by an enactment or rule
31. Article 23(1)(c) to (j).
32. Part 2 of the Constitutional Reform and Governance Act 2010 (see
33. Schedule 3 to the Recall of MPs Act 2015;
34. Schedule 4 contains amendments consequential on this group of sections. 10
35. Article 57(1)(h) of the UK GDPR (investigations on the
36. Part 3 of this Act, and
37. Schedule 8 contains minor and consequential amendments relating to
38. Schedule 15”;
39. Schedule 9 contains minor amendments of the UK GDPR and the 2018 Act.
40. Part 2—Digital verification services
41. Part 3—Customer data and business data
42. Part 2 of the Data Protection and Digital Information Act 2024 5
43. Part 4—Other provision about digital information
44. Article 3 of Regulation (EEC, Euratom) No. 1182/71 of
45. Part 1A or 2 of the Local the Local Authorities (Mayoral
46. Schedule 1 to,” substitute “regulation 2 of”.
47. Part 1 of the Prosecution of Offences Act 1985 (see section 15(2) of
48. Schedule 12 contains minor and consequential amendments.
49. Schedule 5A makes provision about the imposition of penalties in
50. Part 5—Regulation and oversight
51. Schedule 14 makes provision about information standards for health and 15
52. Part 6—Final provisions
53. Part 2 of Schedule 7 to this Act by adding, varying or repealing provision.
54. Schedule 1—Lawfulness of processing: recognised legitimate interests
55. SCHEDULE 1 Section 5
56. Part 1A or 2 of the Local Local Authorities (Mayoral Elections)
57. Schedule 2—Purpose limitation: processing to be treated as compatible with original purpose
58. SCHEDULE 2 Section 6
59. Schedule 3—Automated decision-making: consequential amendments
60. SCHEDULE 3 Section 14
61. Article 22(1) and (4)” substitute “which is subject to the requirement to 15
62. Schedule 4—Obligations of controllers and processors: consequential amendments
63. SCHEDULE 4 Section 24
64. Article 36(1)”.
65. Schedule 5—Transfers of personal data to third countries etc: general processing
66. SCHEDULE 5 Section 25
67. Article 49).
68. Schedule 6—Transfers of personal data to third countries etc: law enforcement processing
69. SCHEDULE 6 Section 25 20
70. Schedule 7—Transfers of personal data to third countries etc: minor and consequential amendments and
71. Part 1—Minor and consequential amendments
72. SCHEDULE 7 Section 25
73. Part 2—Transitional provision
74. Article 46 of the UK GDPR or paragraph 9 of Schedule 21 to the
75. Chapter 5 of the UK GDPR by this Act, and
76. Article 49(4A) of the UK GDPR (inserted by Schedule 5 to this Act).
77. Schedule 5 to this Act).
78. Part 3 of the 2018 Act (law enforcement processing): transfers approved by regulations
79. Part 3 of the 2018 Act (law enforcement processing): transfers subject to appropriate safeguards
80. Schedule 8—Complaints: minor and consequential amendments
81. SCHEDULE 8 Section 46
82. Schedule 9—Data protection: minor amendments
83. SCHEDULE 9 Section 51 10
84. Article 3 of the Periods of Time Regulation, except in—
85. Article 6(1) and”,
86. Schedule 10—Privacy and electronic communications: Commissioner’s enforcement powers
87. SCHEDULE 10 Section 119
88. Schedule 11—Power to require information for social security purposes
89. Part 1—Social Security Administration Act 1992
90. SCHEDULE 11 Section 131
91. Schedule 3B makes provision about a power for the Secretary of 15
92. Schedule 3B,”.
93. PART 1 25
94. Schedule;
95. Schedule is final (despite the provisions of sections 11 and 13 of
96. Part 2—Social Security Administration (Northern Ireland) Act 1992
97. PART 2 30
98. Schedule 3B makes provision about a power for the Department to 5
99. Part 3—Proceeds of Crime Act 2002
100. PART 3 10
101. Schedule 12—Registers of births and deaths: minor and consequential amendments
102. Part 1—Amendments of the Births and Deaths Registration Act 1953
103. SCHEDULE 12 Section 140
104. Part 2—Amendments of other legislation
105. Schedule 13—National Underground Asset Register: monetary penalties
106. SCHEDULE 13 Section 141
107. Schedule 14—Information standards for health and adult social care in England
108. SCHEDULE 14 Section 145
109. Schedule 15—The Information Commission
110. SCHEDULE 15 Section 146
111. Schedule 12A to the 2018 Act

The outline comes from headings detected in the text, so it might miss some or include extras.