Search Legislation

Data Protection Act 2018

 Help about what version

What Version

  • Latest available (Revised)
  • Original (As enacted)
 Help about advanced features

Advanced Features

 Help about opening options

Opening OptionsExpand opening options

Changes over time for: Cross Heading: Exemption from Article 15 of the UK GDPR: serious harm

 Help about opening options

Changes to legislation:

Data Protection Act 2018, Cross Heading: Exemption from Article 15 of the UK GDPR: serious harm is up to date with all changes known to be in force on or before 25 February 2025. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations. Help about Changes to Legislation

Exemption from Article 15 of the [F1UK GDPR]: serious harmU.K.

5(1)Article 15(1) to (3) of the [F2UK GDPR] (confirmation of processing, access to data and safeguards for third country transfers) do not apply to data concerning health to the extent that the serious harm test is met with respect to the data.U.K.

(2)A controller who is not a health professional may not rely on sub-paragraph (1) to withhold data concerning health unless the controller has obtained an opinion from the person who appears to the controller to be the appropriate health professional to the effect that the serious harm test is met with respect to the data.

(3)An opinion does not count for the purposes of sub-paragraph (2) if—

(a)it was obtained before the beginning of the relevant period, or

(b)it was obtained during that period but it is reasonable in all the circumstances to re-consult the appropriate health professional.

(4)In this paragraph, “the relevant period” means the period of 6 months ending with the day on which the opinion would be relied on.

Back to top

Options/Help