(1) The provisions of the UK GDPR and this Act listed in subsection (2) do not apply to personal data to which the UK GDPR applies by virtue of Article 2(1A) (manual unstructured personal data held by FOI public authorities).
(2) Those provisions are -
(a) in Chapter II of the UK GDPR (principles) -
(i) Article 5(1)(a) to (c), (e) and (f) (principles relating to processing, other than the accuracy principle),
(iii) Article 7 (conditions for consent),
(iv) Article 8(1) and (2) (child’s consent),
(v) Article 9 (processing of special categories of personal data),
(vi) Article 10 (data relating to criminal convictions etc), and
(vii) Article 11(2) (processing not requiring identification);
(b) in Chapter III of the UK GDPR (rights of the data subject) -
(i) Article 13(1) to (3) (personal data collected from data subject: information to be provided),
(ii) Article 14(1) to (4) (personal data collected other than from data subject: information to be provided),
…