Chapter 3Exemptions for manual unstructured processing and for national security and defence purposes
- Section 21Definitions
(1) . . . . . . . . . . . . . . . . . . . . . . . . . . .…
- Section 22Application of the GDPR to processing to which this Chapter applies
. . . . . . . . . . . . . . . . . . . . . . . . . . . .…
- Section 23Power to make provision in consequence of regulations related to the GDPR
. . . . . . . . . . . . . . . . . . . . . . . . . . . .…
- Section 24Manual unstructured data held by FOI public authorities
(1) The provisions of the UK GDPR and this Act listed in subsection (2) do not apply to personal data to which the UK GDPR applies by virtue…
- Section 25Manual unstructured data used in longstanding historical research
(1) The provisions of the UK GDPR listed in subsection (2) do not apply to personal data to which the UK GDPR applies by virtue of Article 2(1A)…
- Section 26National security and defence exemption
(1) A provision of the UK GDPR or this Act mentioned in subsection (2) does not apply to personal data to which the UK GDPR applies if exemption…
- Section 27National security: certificate
(1) Subject to subsection (3) , a certificate signed by a Minister of the Crown certifying that exemption from all or any of the provisions listed in section…
- Section 28National security and defence: modifications to Articles 9 and 32 of the UK GDPR
(1) Article 9(1) of the UK GDPR (prohibition on processing of special categories of personal data) does not prohibit the processing of personal data to which the UK…
https://dpa2018.digiphile.law/part/part-2-chapter-3.html
Text as at 18 September 2026.
This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.