Part 1 Adaptations and Restrictions Based on [as Described in] Articles 6(3) and 23(1)

GDPR [UK GDPR] provisions to be adapted or restricted: “the listed GDPR provisions”

1

In this Part of this Schedule, “the listed GDPR provisions” means—

(a)     the following provisions of the GDPR [UK GDPR] (the rights and obligations in which may be restricted by virtue of Article 23(1) of the GDPR [UK GDPR])—

(i)     Article 13(1) to (3) (personal data collected from data subject: information to be provided);

(ii)     Article 14(1) to (4) (personal data collected other than from data subject: information to be provided);

(iii)     Article 15(1) to (3) (confirmation of processing, access to data and safeguards for third country transfers);

(iv)     Article 16 (right to rectification);

(v)     Article 17(1) and (2) (right to erasure);

(vi)     Article 18(1) (restriction of processing);

(vii)     Article 19 (notification obligation regarding rectification or erasure of personal data or restriction of processing);

(viii)     Article 20(1) and (2) (right to data portability);

(ix)     Article 21(1) (objections to processing);

(x)     Article 5 (general principles) so far as its provisions correspond to the rights and obligations provided for in the provisions mentioned in sub-paragraphs (i) to (ix); and

(b)     the following provisions of the GDPR [UK GDPR] (the application of which may be adapted by virtue of Article 6(3) of the GDPR [UK GDPR])—

(i)     Article 5(1)(a) (lawful, fair and transparent processing), other than the lawfulness requirements set out in Article 6;

(ii)     Article 5(1)(b) (purpose limitation).

Crime and taxation: general

2

(1)     The listed GDPR provisions and Article 34(1) and (4) of the GDPR [UK GDPR] (communication of personal data breach to the data subject) do not apply

Popular documents