Judgment Approved by the court for handing down.
R (Bridges) -v- CC South Wales & ors
(c) Providing advice about the code (including changes to it or
breaches of it).”
17.
17. The Secretary of State issued and published a code of practice pursuant to ss.30
and 32 of the PFA 2012 in June 2013 as the Surveillance Camera Code of Practice (see
further below).
Data Protection Act 2018 (“DPA 2018”)
18.
18. The DPA 2018 came into force on 25th May 2018.
19.
19. Section 29 of the DPA 2018 provides:
PART 3 LAW ENFORCEMENT PROCESSING
“29 Processing to which this Part applies
(1) This Part applies to—
(a) the processing by a competent authority of personal data
wholly or partly by automated means, and
(b) the processing by a competent authority otherwise than
by automated means of personal data which forms part of a
filing system or is intended to form part of a filing system.
(2) Any reference in this Part to the processing of personal data
is to processing to which this Part applies. …”
20.
Section 34 of the DPA 2018 provides an overview of the six data protection principles
and the duties of the data protection controller:
“34 Overview and general duty of controller
(1) This Chapter sets out the six data protection principles as
follows—
(a) section 35(1) sets out the first data protection principle
(requirement that processing be lawful and fair);
(b) section 36(1) sets out the second data protection principle
(requirement that purposes of processing be specified, explicit
and legitimate);
(c) section 37 sets out the third data protection principle
(requirement that personal data be adequate, relevant and not
excessive);
(d) section 38(1) sets out the fourth data protection principle
(requirement that personal data be accurate and kept up to
date);