Legislation – Data Protection Act 2018

Data Protection Act 2018, Section 15 is up to date with all changes known to be in force on or before 02 April 2026. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.

Changes to Legislation

Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.

PART 2General processing

Exemptions etc

15Exemptions etc

(1)

Schedules 2, 3 and 4 make provision for exemptions from, and restrictions and adaptations of the application of, rules of the F1UK GDPR.

(2)

In Schedule 2—

(a)

Part 1 makes provision adapting or restricting the application of rules contained in Articles 13 to 21 and 34 of the F2UK GDPR in specified circumstances F3(of a kind described in Article 6(3) and Article 23(1) of the F4UK GDPR);

(b)

Part 2 makes provision restricting the application of rules contained in Articles 13 to 21 and 34 of the F5UK GDPR in specified circumstances F6(of a kind described in Article 23(1) of the F7UK GDPR);

(c)

Part 3 makes provision restricting the application of Article 15 of the F8UK GDPR where this is necessary to protect the rights of others F9(of a kind described in Article 23(1) of the F10UK GDPR);

(d)

Part 4 makes provision restricting the application of rules contained in Articles 13 to 15 of the F11UK GDPR in specified circumstances F12(of a kind described in Article 23(1) of the F13UK GDPR);

(e)

Part 5 makes provision containing exemptions or derogations from Chapters II, III, IV F14and V of the UK GDPR for reasons relating to freedom of expression F15(of a kind described in Article 85(2) of the UK GDPR);

(f)

Part 6 makes provision containing derogations from rights contained in Articles 15, 16, 18, 19, 20 and 21 of the F16UK GDPR for scientific or historical research purposes, statistical purposes and archiving purposes F17….

(3)

Schedule 3 makes provision restricting the application of rules contained in Articles 13 to 21 of the F18UK GDPR to health, social work, education and child abuse data F19(of a kind described in Article 23(1) of the F20UK GDPR).

(4)

Schedule 4 makes provision restricting the application of rules contained in Articles 13 to 21 of the F21UK GDPR to information the disclosure of which is prohibited or restricted by an enactment F22(of a kind described in Article 23(1) of the F23UK GDPR).

F24(4A)

In connection with the manual unstructured processing of personal data held by an FOI public authority, see Chapter 3 of this Part (sections 21, 24 and 25).

(5)

In connection with the safeguarding of national security and with defence, see Chapter 3 of this Part F25(sections 26 to 28).