Date-stamp loading
Version status: In force | Document consolidation status: Updated to reflect all known changes
Version date: 1 July 2003 - onwards
    Version 1 of 1    

2B. Processing of sensitive personal data.

From 25 May 2018, this Act ceased to apply to the processing of personal data (within the meaning of this Act) other than the processing of such data for the purposes of safeguarding the security of the State, the defence of the State or the international relations of the State, or the processing of such data under the Criminal Justice (Forensic Evidence and DNA Database System) Act 2014 or the Vehicle Registration Data (Automated Searching and Exchange) Act 2018 to the extent that this Act is applied in those Acts but is still applicable to complaints made under s. 10 and contraventions of this Act that occurred before 25 May 2018, see s. 8 of the Data Protection Act 2018 (No. 7).

(1) Sensitive personal data shall not be processed by a data controller unless:

(a) sections 2 and 2A (as amended and inserted, respectively, by the Act of 2003) are complied with, and

(b) in addition, at least one of the following conditions is met:

(i) the consent referred to in paragraph (a) of subsecti

Comparing proposed amendment...