Legislation – Data Protection Act 2018
Changes to legislation:
Data Protection Act 2018, Section 45A is up to date with all changes known to be in force on or before 02 April 2026. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
Changes to Legislation
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
PART 3Law enforcement processing
CHAPTER 3Rights of the data subject
…
F145AExemption from sections 44 and 45: legal professional privilege
(1)
Sections 44(2) and 45(1) do not require the controller to give the data subject—
(a)
information in respect of which a claim to legal professional privilege or, in Scotland, confidentiality of communications could be maintained in legal proceedings, or
(b)
information in respect of which a duty of confidentiality is owed by a professional legal adviser to a client of the adviser.
(2)
A controller relying on the exemption in subsection (1) must inform the data subject in writing without undue delay of—
(a)
the decision to rely on the exemption,
(b)
the reason for the decision,
(c)
the data subject’s right to make a request to the Commissioner under section 51,
(d)
the data subject’s right to lodge a complaint with the Commissioner under section 165, and
(e)
the data subject’s right to apply to a court under section 167.
(3)
Subsection (2)(a) and (b) do not apply to the extent that complying with them would—
(a)
undermine a claim described in subsection (1)(a), or
(b)
conflict with a duty described in subsection (1)(b).
(4)
The controller must—
(a)
record the reason for a decision to rely on the exemption in subsection (1), and
(b)
if requested to do so by the Commissioner, make the record available to the Commissioner.
(5)
The reference in subsection (1) to sections 44(2) and 45(1) includes sections 35 to 40 so far as their provisions correspond to the rights and obligations provided for in sections 44(2) and 45(1).