Data Protection Act 2018, Paragraph 27 is up to date with all changes known to be in force on or before 06 March 2025. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
27(1)The listed GDPR provisions do not apply to personal data processed for—U.K.
(a)scientific or historical research purposes, or
(b)statistical purposes,
to the extent that the application of those provisions would prevent or seriously impair the achievement of the purposes in question.
This is subject to [F1sub-paragraphs (3) and (4)].
(2)For the purposes of this paragraph, the listed GDPR provisions are the following provisions of the [F2UK GDPR]—
(a)Article 15(1) to (3) (confirmation of processing, access to data and safeguards for third country transfers);
(b)Article 16 (right to rectification);
(c)Article 18(1) (restriction of processing);
(d)Article 21(1) (objections to processing).
(3)The exemption in sub-paragraph (1) is available only where—
(a)the personal data is processed in accordance with Article 89(1) of the [F3UK GDPR] (as supplemented by section 19), and
(b)as regards the disapplication of Article 15(1) to (3), the results of the research or any resulting statistics are not made available in a form which identifies a data subject.
[F4(4)Where processing for a purpose described in sub-paragraph (1) serves at the same time another purpose, the exemption in sub-paragraph (1) is available only where the personal data is processed for a purpose referred to in that sub-paragraph.]
Textual Amendments
F1Words in Sch. 2 para. 27(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(23)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
F2Words in Sch. 2 para. 27(2) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(23)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
F3Words in Sch. 2 para. 27(3)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(23)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
F4Sch. 2 para. 27(4) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 92(23)(d) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Commencement Information
I1Sch. 2 para. 27 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)
All content is available under the Open Government Licence v3.0 except where otherwise stated. This site additionally contains content derived from EUR-Lex, reused under the terms of the Commission Decision 2011/833/EU on the reuse of documents from the EU institutions. For more information see the EUR-Lex public statement on re-use.
