
Print Options
PrintThe Whole
Act
PrintThis
Schedule
only
Changes over time for: SCHEDULE 2


Timeline of Changes
This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.
Version Superseded: 01/03/2000
Status:
Point in time view as at 16/07/1998. This version of this schedule contains provisions that are not valid for this point in time.

Status
Not valid for this point in time generally means that a provision was not in force for the point in time you have selected to view it on.
Changes to legislation:
Data Protection Act 1998, SCHEDULE 2 is up to date with all changes known to be in force on or before 13 May 2025. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.

Changes to Legislation
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
Section 4(3).
SCHEDULE 2U.K. Conditions relevant for purposes of the first principle: processing of any personal data
Valid from 01/03/2000
1U.K.The data subject has given his consent to the processing.
Valid from 01/03/2000
2U.K.The processing is necessary—
(a)for the performance of a contract to which the data subject is a party, or
(b)for the taking of steps at the request of the data subject with a view to entering into a contract.
Valid from 01/03/2000
3U.K.The processing is necessary for compliance with any legal obligation to which the data controller is subject, other than an obligation imposed by contract.
Valid from 01/03/2000
4U.K.The processing is necessary in order to protect the vital interests of the data subject.
Valid from 01/03/2000
5The processing is necessary—
(a)for the administration of justice,
(b)for the exercise of any functions conferred on any person by or under any enactment,
(c)for the exercise of any functions of the Crown, a Minister of the Crown or a government department, or
(d)for the exercise of any other functions of a public nature exercised in the public interest by any person.
Modifications etc. (not altering text)
6(1)The processing is necessary for the purposes of legitimate interests pursued by the data controller or by the third party or parties to whom the data are disclosed, except where the processing is unwarranted in any particular case by reason of prejudice to the rights and freedoms or legitimate interests of the data subject.
(2)The Secretary of State may by order specify particular circumstances in which this condition is, or is not, to be taken to be satisfied.
Back to top