Section 84 inserts new section 71A into the DPA 2018 which enables expert public bodies, who have sufficient knowledge and experience, to create codes of conduct (mirroring the existing provision under the UK GDPR). These are tailored, sector-specific, pieces of guidance which are signed off by the Information Commissioner. Subsection (4) sets out a non-exhaustive list of the areas that may be covered when drawing up a code of conduct; this includes, for example, guidance on the information that controllers must provide to the public and to data subjects. Expert public bodies are encouraged to consult with relevant stakeholders when drawing up, amending or extending a code of conduct to ensure that it appropriately reflects the processing activities set out under Part 3 of the DPA 2018.
	Competent authorities are expected to monitor their compliance with any code of conduct produced under the law enforcement processing regime through existing internal auditing mechanisms.
Part 5: Data Protection and Privacy Codes of conduct Section 84: Law enforcement processing and codes of conduct