Data Protection Act 2018
E224083
The Data Protection Act 2018 is the UK’s primary data protection law that implements and supplements the EU GDPR framework, setting rules for how personal data must be collected, used, and safeguarded.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Data Protection Act 2018 canonical | 7 |
How this entity was disambiguated
This entity first appeared as the object of triple T2004834 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Data Protection Act 2018 Context triple: [Information Commissioner’s Office, appliesStatutoryRegulation, Data Protection Act 2018]
-
A.
Joint Committee on Personal Data Protection Bill
The Joint Committee on Personal Data Protection Bill was a parliamentary panel in India tasked with examining and recommending changes to the country’s proposed comprehensive data protection legislation.
-
B.
Privacy Act (Canada)
The Privacy Act (Canada) is a federal law that governs how Canadian government institutions collect, use, and disclose personal information about individuals.
-
C.
Investigatory Powers Act 2016
The Investigatory Powers Act 2016 is a UK law that consolidates and regulates the surveillance, interception, and data retention powers of British intelligence and law enforcement agencies.
-
D.
PROTECT Act
The PROTECT Act is a U.S. federal law aimed primarily at strengthening protections for children against sexual exploitation, abuse, and abduction, including tougher penalties for related offenses.
-
E.
Freedom of Information Act 2000
The Freedom of Information Act 2000 is a UK law that grants the public a general right of access to information held by public authorities, subject to certain exemptions.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Data Protection Act 2018 Target entity description: The Data Protection Act 2018 is the UK’s primary data protection law that implements and supplements the EU GDPR framework, setting rules for how personal data must be collected, used, and safeguarded.
-
A.
Joint Committee on Personal Data Protection Bill
The Joint Committee on Personal Data Protection Bill was a parliamentary panel in India tasked with examining and recommending changes to the country’s proposed comprehensive data protection legislation.
-
B.
Privacy Act (Canada)
The Privacy Act (Canada) is a federal law that governs how Canadian government institutions collect, use, and disclose personal information about individuals.
-
C.
Investigatory Powers Act 2016
The Investigatory Powers Act 2016 is a UK law that consolidates and regulates the surveillance, interception, and data retention powers of British intelligence and law enforcement agencies.
-
D.
PROTECT Act
The PROTECT Act is a U.S. federal law aimed primarily at strengthening protections for children against sexual exploitation, abuse, and abduction, including tougher penalties for related offenses.
-
E.
Freedom of Information Act 2000
The Freedom of Information Act 2000 is a UK law that grants the public a general right of access to information held by public authorities, subject to certain exemptions.
- F. None of above. chosen
Statements (57)
| Predicate | Object |
|---|---|
| instanceOf |
Act of Parliament of the United Kingdom
ⓘ
data protection law ⓘ |
| alsoKnownAs | DPA 2018 ⓘ |
| appliesTo |
charities
ⓘ
data controllers ⓘ data processors ⓘ non-profit organisations ⓘ private sector organisations ⓘ public sector organisations ⓘ |
| contains | schedules ⓘ |
| country | United Kingdom ⓘ |
| defines |
criminal offence data
ⓘ
personal data ⓘ special category data ⓘ |
| designatesSupervisoryAuthority | Information Commissioner’s Office ⓘ |
| establishes | UK data protection framework post-GDPR ⓘ |
| grantsPowersTo | Information Commissioner’s Office ⓘ |
| implements |
GDPR
ⓘ
surface form:
EU General Data Protection Regulation
Law Enforcement Directive (EU) 2016/680 ⓘ |
| jurisdiction |
England and Wales
ⓘ
Northern Ireland ⓘ Scotland ⓘ |
| longTitle | An Act to make provision for the regulation of the processing of information relating to individuals; to make provision in connection with the Information Commissioner’s functions under certain regulations relating to information; to make provision for a direct marketing code of practice; and for connected purposes ⓘ |
| parliament |
British Parliament
ⓘ
surface form:
Parliament of the United Kingdom
|
| part |
Part 1: Preliminary
ⓘ
Part 2: General processing ⓘ Part 3: Law enforcement processing ⓘ Part 4: Intelligence services processing ⓘ Part 5: Information Commissioner ⓘ Part 6: Enforcement ⓘ Part 7: Supplementary and final provisions ⓘ |
| providesFor |
administrative fines
ⓘ
age of consent for information society services ⓘ criminal offences ⓘ data subject rights ⓘ enforcement powers ⓘ exemptions from certain data protection obligations ⓘ processing for intelligence services ⓘ processing for law enforcement purposes ⓘ |
| purpose | to protect the rights and freedoms of individuals in relation to the processing of personal data ⓘ |
| region | United Kingdom ⓘ |
| regulates | processing of personal data ⓘ |
| relatedTo |
Privacy and Electronic Communications Regulations
ⓘ
surface form:
Privacy and Electronic Communications Regulations 2003
GDPR ⓘ
surface form:
UK GDPR
|
| repealed | Data Protection Act 1998 ⓘ |
| requires |
appointment of data protection officers in specified circumstances
ⓘ
appropriate technical and organisational measures for data security ⓘ data protection impact assessments in certain cases ⓘ |
| royalAssentDate | 2018-05-23 ⓘ |
| setsAgeOfDigitalConsent | 13 ⓘ |
| shortTitle | Data Protection Act 2018 self-link ⓘ |
| status | in force ⓘ |
| subjectMatter |
data protection
ⓘ
personal data ⓘ privacy ⓘ |
| supplements |
GDPR
ⓘ
surface form:
EU General Data Protection Regulation
|
| yearEnacted | 2018 ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Data Protection Act 2018 Description of subject: The Data Protection Act 2018 is the UK’s primary data protection law that implements and supplements the EU GDPR framework, setting rules for how personal data must be collected, used, and safeguarded.
Referenced by (7)
Full triples — surface form annotated when it differs from this entity's canonical label.
subject surface form:
Information Commissioner's Office