The following Information Law practice note provides comprehensive and up to date legal information covering:
The table in this Practice Note identifies and briefly summarises the principal exemptions available under the Data Protection Act 1998 (DPA 1998). This Practice Note should be read together with Practice Note: Exemptions under the DPA 1998.
The main exemptions are contained in Part IV and Schedule 7 of the DPA 1998. Data or processing that comes within a Part IV (Exemptions) exemption is not treated as personal data or processing of personal data for the purposes of the data protection principles (DPA 1998, Sch 1) and Parts II (Rights of data subjects) and III (Notification).
The Information Commissioner's Office (ICO) has issued general guidance on the application of the main exemptions under the DPA 1998, including on how the exemptions work and when these apply. Specific guidance is also available from the ICO on particular exemptions or scenarios, as detailed below.
For a comprehensive introduction to the GDPR, collating key practical guidance, see: Data protection toolkit.
As part of the general duties set out in DPA 1998, s 51, the Information Commissioner must promote good practice, the observance of DPA 1998 by data controllers, and develop appropriate codes of practice. To help data controllers interpret the statutory framework, the ICO has published a Guide to data protection, along with the following guidance:
Guide to data protection—Principle 6—Subject access requests
Guide to data protection—Exemptions
**Trials are provided to all LexisPSL and LexisLibrary content, excluding Practice Compliance, Practice Management and Risk and Compliance, subscription packages are tailored to your specific needs. To discuss trialling these LexisPSL services please email customer service via our online form. Free trials are only available to individuals based in the UK. We may terminate this trial at any time or decide not to give a trial, for any reason. Trial includes one question to LexisAsk during the length of the trial.
To view the latest version of this document and thousands of others like it, sign-in to LexisPSL or register for a free trial.
Existing user? Sign-in
Take a free trial
On 29 August 2015, the Prudential Regulation Authority (PRA) published the PRA Rulebook (Rulebook). The transition from the Handbook to the Rulebook was intended to benefit PRA-authorised firms, to access clearer and more concise rules. Alongside the Rulebook, supervisory statements and statements
When is quantum meruit and quantum valebat relevant?Claims in quantum meruit (value of services) and quantum valebat (value of goods) arise in diverse situations ranging from where contractual terms are silent on issues of payment to where there is no contract at all (Serck v Drake & Scull).General
This Practice Note considers claims for damages for breach of statutory duty. For guidance on claims for damages for a negligent breach of duty of care outside a statutory duty, see Practice Notes:•Negligence—when does a duty of care arise?•Negligence—when is the duty of care breached?Breach of
Brexit: The UK's departure from the EU on exit day ie Friday 31 January 2020 has implications for practitioners dealing with provisions in the CPR relevant to cross border matters, including CPR 5.4C (discussed below). For guidance on the impact of Brexit on the CPR, see Cross border
0330 161 1234
To view our latest legal guidance content,sign-in to Lexis®PSL or register for a free trial.