- Latest available (Revised)
- Point in Time (19/08/2003)
- Original (As enacted)
Version Superseded: 01/01/2005
Point in time view as at 19/08/2003. This version of this schedule contains provisions that are not valid for this point in time.
Data Protection Act 1998, SCHEDULE 8 is up to date with all changes known to be in force on or before 25 August 2024. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations.
Changes and effects yet to be applied by the editorial team are only applicable when viewing the latest version or prospective version of legislation. They are therefore not accessible when viewing legislation as at a specific point in time. To view the ‘Changes to Legislation’ information for this provision return to the latest version view using the options provided in the ‘What Version’ box above.
Section 39.
1(1)For the purposes of this Schedule, personal data are “eligible data” at any time if, and to the extent that, they are at that time subject to processing which was already under way immediately before 24th October 1998.U.K.
(2)In this Schedule— “eligible automated data” means eligible data which fall within paragraph (a) or (b) of the definition of “data” in section 1(1); “eligible manual data” means eligible data which are not eligible automated data; “the first transitional period” means the period beginning with the commencement of this Schedule and ending with 23rd October 2001; “the second transitional period” means the period beginning with 24th October 2001 and ending with 23rd October 2007.
2(1)Eligible manual data, other than data forming part of an accessible record, are exempt from the data protection principles and Parts II and III of this Act during the first transitional period.U.K.
(2)This paragraph does not apply to eligible manual data to which paragraph 4 applies.
3(1)This paragraph applies to—U.K.
(a)eligible manual data forming part of an accessible record, and
(b)personal data which fall within paragraph (d) of the definition of “data” in section 1(1) but which, because they are not subject to processing which was already under way immediately before 24th October 1998, are not eligible data for the purposes of this Schedule.
(2)During the first transitional period, data to which this paragraph applies are exempt from—
(a)the data protection principles, except the sixth principle so far as relating to sections 7 and 12A,
(b)Part II of this Act, except—
(i)section 7 (as it has effect subject to section 8) and section 12A, and
(ii)section 15 so far as relating to those sections, and
(c)Part III of this Act.
4(1)This paragraph applies to eligible manual data which consist of information relevant to the financial standing of the data subject and in respect of which the data controller is a credit reference agency.U.K.
(2)During the first transitional period, data to which this paragraph applies are exempt from—
(a)the data protection principles, except the sixth principle so far as relating to sections 7 and 12A,
(b)Part II of this Act, except—
(i)section 7 (as it has effect subject to sections 8 and 9) and section 12A, and
(ii)section 15 so far as relating to those sections, and
(c)Part III of this Act.
5U.K.During the first transitional period, for the purposes of this Act (apart from paragraph 1), eligible automated data are not to be regarded as being “processed” unless the processing is by reference to the data subject.
6(1)Subject to sub-paragraph (2), eligible automated data processed by a data controller for one or more of the following purposes—U.K.
(a)calculating amounts payable by way of remuneration or pensions in respect of service in any employment or office or making payments of, or of sums deducted from, such remuneration or pensions, or
(b)keeping accounts relating to any business or other activity carried on by the data controller or keeping records of purchases, sales or other transactions for the purpose of ensuring that the requisite payments are made by or to him in respect of those transactions or for the purpose of making financial or management forecasts to assist him in the conduct of any such business or activity,
are exempt from the data protection principles and Parts II and III of this Act during the first transitional period.
(2)It shall be a condition of the exemption of any eligible automated data under this paragraph that the data are not processed for any other purpose, but the exemption is not lost by any processing of the eligible data for any other purpose if the data controller shows that he had taken such care to prevent it as in all the circumstances was reasonably required.
(3)Data processed only for one or more of the purposes mentioned in sub-paragraph (1)(a) may be disclosed—
(a)to any person, other than the data controller, by whom the remuneration or pensions in question are payable,
(b)for the purpose of obtaining actuarial advice,
(c)for the purpose of giving information as to the persons in any employment or office for use in medical research into the health of, or injuries suffered by, persons engaged in particular occupations or working in particular places or areas,
(d)if the data subject (or a person acting on his behalf) has requested or consented to the disclosure of the data either generally or in the circumstances in which the disclosure in question is made, or
(e)if the person making the disclosure has reasonable grounds for believing that the disclosure falls within paragraph (d).
(4)Data processed for any of the purposes mentioned in sub-paragraph (1) may be disclosed—
(a)for the purpose of audit or where the disclosure is for the purpose only of giving information about the data controller’s financial affairs, or
(b)in any case in which disclosure would be permitted by any other provision of this Part of this Act if sub-paragraph (2) were included among the non-disclosure provisions.
(5)In this paragraph “remuneration” includes remuneration in kind and “pensions” includes gratuities or similar benefits.
7U.K.Eligible automated data processed by an unincorporated members’ club and relating only to the members of the club are exempt from the data protection principles and Parts II and III of this Act during the first transitional period.
8U.K.Eligible automated data processed by a data controller only for the purposes of distributing, or recording the distribution of, articles or information to the data subjects and consisting only of their names, addresses or other particulars necessary for effecting the distribution, are exempt from the data protection principles and Parts II and III of this Act during the first transitional period.
9U.K.Neither paragraph 7 nor paragraph 8 applies to personal data relating to any data subject unless he has been asked by the club or data controller whether he objects to the data relating to him being processed as mentioned in that paragraph and has not objected.
10U.K.It shall be a condition of the exemption of any data under paragraph 7 that the data are not disclosed except as permitted by paragraph 11 and of the exemption under paragraph 8 that the data are not processed for any purpose other than that mentioned in that paragraph or as permitted by paragraph 11, but—
(a)the exemption under paragraph 7 shall not be lost by any disclosure in breach of that condition, and
(b)the exemption under paragraph 8 shall not be lost by any processing in breach of that condition,
if the data controller shows that he had taken such care to prevent it as in all the circumstances was reasonably required.
11U.K.Data to which paragraph 10 applies may be disclosed—
(a)if the data subject (or a person acting on his behalf) has requested or consented to the disclosure of the data either generally or in the circumstances in which the disclosure in question is made,
(b)if the person making the disclosure has reasonable grounds for believing that the disclosure falls within paragraph (a), or
(c)in any case in which disclosure would be permitted by any other provision of this Part of this Act if paragraph 8 were included among the non-disclosure provisions.
12U.K.Eligible automated data which are processed only for the purpose of replacing other data in the event of the latter being lost, destroyed or impaired are exempt from section 7 during the first transitional period.
13(1)During the first transitional period, eligible automated data are exempt from the following provisions—U.K.
(a)the first data protection principle to the extent to which it requires compliance with—
(i)paragraph 2 of Part II of Schedule 1,
(ii)the conditions in Schedule 2, and
(iii)the conditions in Schedule 3,
(b)the seventh data protection principle to the extent to which it requires compliance with paragraph 12 of Part II of Schedule 1;
(c)the eighth data protection principle,
(d)in section 7(1), paragraphs (b), (c)(ii) and (d),
(e)sections 10 and 11,
(f)section 12, and
(g)section 13, except so far as relating to—
(i)any contravention of the fourth data protection principle,
(ii)any disclosure without the consent of the data controller,
(iii)loss or destruction of data without the consent of the data controller, or
(iv)processing for the special purposes.
(2)The specific exemptions conferred by sub-paragraph (1)(a), (c) and (e) do not limit the data controller’s general duty under the first data protection principle to ensure that processing is fair.
Modifications etc. (not altering text)
C1Sch. 8 Pt. III excluded (1.1.2005) by 2000 c. 36, ss. 40(6), 87(3) (with ss. 7(1)(7), 56, 78); S.I. 2004/3122, art. 2
Sch. 8 Pt. III excluded (S.) (1.1.2005) by The Environmental Information (Scotland) Regulations 2004 (S.S.I. 2004/520), reg. 11(5) (with reg. 3)
14(1)This paragraph applies to—U.K.
(a)eligible manual data which were held immediately before 24th October 1998, and
(b)personal data which fall within paragraph (d) of the definition of “data” in section 1(1) but do not fall within paragraph (a) of this sub-paragraph,
but does not apply to eligible manual data to which the exemption in paragraph 16 applies.
(2)During the second transitional period, data to which this paragraph applies are exempt from the following provisions—
(a)the first data protection principle except to the extent to which it requires compliance with paragraph 2 of Part II of Schedule 1,
(b)the second, third, fourth and fifth data protection principles, and
(c)section 14(1) to (3).
Valid from 01/01/2005
[F114A(1)This paragraph applies to personal data which fall within paragraph (e) of the definition of “data” in section 1(1) and do not fall within paragraph 14(1)(a), but does not apply to eligible manual data to which the exemption in paragraph 16 applies.U.K.
(2)During the second transitional period, data to which this paragraph applies are exempt from—
(a)the fourth data protection principle, and
(b)section 14(1) to (3).]
Textual Amendments
F1Sch. 8 Pt. III para. 14A inserted (1.1.2005) by 2000 c. 36, ss. 70(3), 87(3) (with ss. 56, 78); S.I. 2004/1909, art. 2; S.I. 2004/3122, art. 2
15U.K.In this Part of this Schedule “the relevant conditions” has the same meaning as in section 33.
16(1)Eligible manual data which are processed only for the purpose of historical research in compliance with the relevant conditions are exempt from the provisions specified in sub-paragraph (2) after 23rd October 2001.U.K.
(2)The provisions referred to in sub-paragraph (1) are—
(a)the first data protection principle except in so far as it requires compliance with paragraph 2 of Part II of Schedule 1,
(b)the second, third, fourth and fifth data protection principles, and
(c)section 14(1) to (3).
17(1)After 23rd October 2001 eligible automated data which are processed only for the purpose of historical research in compliance with the relevant conditions are exempt from the first data protection principle to the extent to which it requires compliance with the conditions in Schedules 2 and 3.U.K.
(2)Eligible automated data which are processed—
(a)only for the purpose of historical research,
(b)in compliance with the relevant conditions, and
(c)otherwise than by reference to the data subject,
are also exempt from the provisions referred to in sub-paragraph (3) after 23rd October 2001.
(3)The provisions referred to in sub-paragraph (2) are—
(a)the first data protection principle except in so far as it requires compliance with paragraph 2 of Part II of Schedule 1,
(b)the second, third, fourth and fifth data protection principles, and
(c)section 14(1) to (3).
18U.K.For the purposes of this Part of this Schedule personal data are not to be treated as processed otherwise than for the purpose of historical research merely because the data are disclosed—
(a)to any person, for the purpose of historical research only,
(b)to the data subject or a person acting on his behalf,
(c)at the request, or with the consent, of the data subject or a person acting on his behalf, or
(d)in circumstances in which the person making the disclosure has reasonable grounds for believing that the disclosure falls within paragraph (a), (b) or (c).
19U.K.Processing which was already under way immediately before 24th October 1998 is not assessable processing for the purposes of section 22.
The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
The Whole Act you have selected contains over 200 provisions and might take some time to download.
Would you like to continue?
The Whole Act you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.
Would you like to continue?
Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.
Original (As Enacted or Made): The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.
Point in Time: This becomes available after navigating to view revised legislation as it stood at a certain point in time via Advanced Features > Show Timeline of Changes or via a point in time advanced search.
Geographical Extent: Indicates the geographical area that this provision applies to. For further information see ‘Frequently Asked Questions’.
Show Timeline of Changes: See how this legislation has or could change over time. Turning this feature on will show extra navigation options to go to these specific points in time. Return to the latest available version by using the controls above in the What Version box.
Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:
This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.
Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:
Click 'View More' or select 'More Resources' tab for additional information including: