Search Legislation

Regulation (EU) 2016/679 of the European Parliament and of the CouncilShow full title

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation)(Text with EEA relevance)

 Help about what version

What Version

 Help about advanced features

Advanced Features

 Help about opening options

Opening OptionsExpand opening options

 Help about UK-EU Regulation

Legislation originating from the EU

When the UK left the EU, legislation.gov.uk published EU legislation that had been published by the EU up to IP completion day (31 December 2020 11.00 p.m.). On legislation.gov.uk, these items of legislation are kept up-to-date with any amendments made by the UK since then.

Changes over time for: CHAPTER IX

 Help about opening options

Changes to legislation:

Regulation (EU) 2016/679 of the European Parliament and of the Council, CHAPTER IX is up to date with all changes known to be in force on or before 13 November 2024. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations. Help about Changes to Legislation

CHAPTER IXU.K.Provisions relating to specific processing situations

Article 85U.K.Processing and freedom of expression and information

F11.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

2.For processing carried out for journalistic purposes or the purpose of academic artistic or literary expression, [F2the Secretary of State may] provide for exemptions or derogations from Chapter II (principles), Chapter III (rights of the data subject), Chapter IV (controller and processor), Chapter V (transfer of personal data to third countries or international organisations), Chapter VI ([F3the Commissioner]) F4... and Chapter IX (specific data processing situations) if they are necessary to reconcile F5... the protection of personal data with the freedom of expression and information.

[F62A.The Secretary of State may exercise the power under paragraph 2 of this Article only by making regulations under section 16 of the 2018 Act.]

F73.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Textual Amendments

Article 86U.K.Processing and public access to official documents

[F81.] Personal data in official documents held by a public authority or a public body or a private body for the performance of a task carried out in the public interest may be disclosed by the authority or body in accordance with [F9domestic law] to which the public authority or body is subject in order to reconcile public access to official documents with F10... the protection of personal data pursuant to this Regulation.

[F112.Chapter 3 of Part 2 of the 2018 Act makes provision about the application of this Regulation to the manual unstructured processing of personal data held by an FOI public authority (as defined in Article 2).]

[F12Article 86AU.K.Processing and national security and defence

Chapter 3 of Part 2 of the 2018 Act makes provision about the application of this Regulation where processing is carried out, or exemption from a provision of this Regulation is required, for the purposes of safeguarding national security or for defence purposes.]

F13Article 87U.K.Processing of the national identification number

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F14Article 88U.K.Processing in the context of employment

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Article 89U.K.Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes

1.Processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, shall be subject to appropriate safeguards, in accordance with this Regulation, for the rights and freedoms of the data subject. Those safeguards shall ensure that technical and organisational measures are in place in particular in order to ensure respect for the principle of data minimisation. Those measures may include pseudonymisation provided that those purposes can be fulfilled in that manner. Where those purposes can be fulfilled by further processing which does not permit or no longer permits the identification of data subjects, those purposes shall be fulfilled in that manner.

[F151A.In the 2018 Act, section 19 makes provision about when the requirements in paragraph 1 are satisfied.]

F162.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F163.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F164.. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F17Article 90U.K.Obligations of secrecy

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F18Article 91U.K.Existing data protection rules of churches and religious associations

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Back to top

Options/Help