Data Protection Act 2018

Changes over time for: Section 15

Alternative versions:

Changes to legislation:

Data Protection Act 2018, Section 15 is up to date with all changes known to be in force on or before 12 January 2025. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.

Changes to Legislation

Revised legislation carried on this site may not be fully up to date. Changes and effects are recorded by our editorial team in lists which can be found in the ‘Changes to Legislation’ area. Where those effects have yet to be applied to the text of the legislation by the editorial team they are also listed alongside the legislation in the affected provisions. Use the ‘more’ link to open the changes and effects relevant to the provision you are viewing.

View outstanding changes

Changes and effects yet to be applied to Section 15:

s. 13A inserted by 2024 c. 21 s. 31(4)
Sch. 3 para. 8(1)(y) added by 2022 c. 18 (N.I.) Sch. 3 para. 78(3)

Changes and effects yet to be applied to the whole Act associated Parts and Chapters:

Whole provisions yet to be inserted into this Act (including any effects on those provisions):

s. 13A inserted by 2024 c. 21 s. 31(4)
Sch. 3 para. 8(1)(y) added by 2022 c. 18 (N.I.) Sch. 3 para. 78(3)

15Exemptions etcU.K.

This section has no associated Explanatory Notes

(1)Schedules 2, 3 and 4 make provision for exemptions from, and restrictions and adaptations of the application of, rules of the [F1UK GDPR].

(2)In Schedule 2—

(a)Part 1 makes provision adapting or restricting the application of rules contained in Articles 13 to 21 and 34 of the [F2UK GDPR] in specified circumstances [F3(of a kind described in] Article 6(3) and Article 23(1) of the [F4UK GDPR)];

(b)Part 2 makes provision restricting the application of rules contained in Articles 13 to 21 and 34 of the [F5UK GDPR] in specified circumstances [F6(of a kind described in] Article 23(1) of the [F7UK GDPR)];

(c)Part 3 makes provision restricting the application of Article 15 of the [F8UK GDPR] where this is necessary to protect the rights of others [F9(of a kind described in] Article 23(1) of the [F10UK GDPR)];

(d)Part 4 makes provision restricting the application of rules contained in Articles 13 to 15 of the [F11UK GDPR] in specified circumstances [F12(of a kind described in] Article 23(1) of the [F13UK GDPR)];

(e)Part 5 makes provision containing exemptions or derogations from Chapters II, III, IV [F14and V of the UK GDPR] for reasons relating to freedom of expression [F15(of a kind described in Article 85(2) of the UK GDPR)];

(f)Part 6 makes provision containing derogations from rights contained in Articles 15, 16, 18, 19, 20 and 21 of the [F16UK GDPR] for scientific or historical research purposes, statistical purposes and archiving purposes F17....

(3)Schedule 3 makes provision restricting the application of rules contained in Articles 13 to 21 of the [F18UK GDPR] to health, social work, education and child abuse data [F19(of a kind described in] Article 23(1) of the [F20UK GDPR)].

(4)Schedule 4 makes provision restricting the application of rules contained in Articles 13 to 21 of the [F21UK GDPR] to information the disclosure of which is prohibited or restricted by an enactment [F22(of a kind described in] Article 23(1) of the [F23UK GDPR)].

[F24(4A)In connection with the manual unstructured processing of personal data held by an FOI public authority, see Chapter 3 of this Part (sections 21, 24 and 25).]

(5)In connection with the safeguarding of national security and with defence, see Chapter 3 of this Part [F25(sections 26 to 28)].

Textual Amendments

F1Words in s. 15(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F2Words in s. 15(2)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(3)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F3Words in s. 15(2)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(3)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F4Words in s. 15(2)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(3)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F5Words in s. 15(2)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(4)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F6Words in s. 15(2)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(4)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F7Words in s. 15(2)(b) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(4)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F8Words in s. 15(2)(c) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(5)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F9Words in s. 15(2)(c) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(5)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F10Words in s. 15(2)(c) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 19(5)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)