Date-stamp loading
Version status: In force | Document consolidation status: Updated to reflect all known changes
Version date: 31 December 2020 - onwards
  Version 3 of 3    

26. National security and defence exemption

(1) A provision of the UK GDPR or this Act mentioned in subsection (2) does not apply to personal data to which the UK GDPR applies if exemption from the provision is required for -

(a) the purpose of safeguarding national security, or

(b) defence purposes.

(2) The provisions are -

(a) Chapter II of the UK GDPR (principles) except for -

(i) Article 5(1)(a) (lawful, fair and transparent processing), so far as it requires processing of personal data to be lawful;

(ii) Article 6 (lawfulness of processing);

(iii) Article 9 (processing of special categories of personal data);

(b) Chapter III of the UK GDPR (rights of data subjects);

(c) in Chapter IV of the UK GDPR -

(i) Article 33 (notification of personal data breach to the Commissioner);

(ii) Article 34 (communication of personal data breach to the data subject);

(d) Chapter V of the UK GDPR (transfers of personal data to third countries or international organisations);

(e) in Chapter VI of the UK GDPR -

(i) Article 57(1)(a) and (h) (Com

Comparing proposed amendment...