Part 2 Restrictions Based on [as Described in] Article 23(1): Restrictions of Rules in Articles 13 to 21 and 34

GDPR [UK GDPR] provisions to be restricted: “the listed GDPR provisions”


In this Part of this Schedule, “the listed GDPR provisions” means the following provisions of the GDPR [UK GDPR] (the rights and obligations in which may be restricted by virtue of Article 23(1) of the GDPR [UK GDPR])—

(a)     Article 13(1) to (3) (personal data collected from data subject: information to be provided);

(b)     Article 14(1) to (4) (personal data collected other than from data subject: information to be provided);

(c)     Article 15(1) to (3) (confirmation of processing, access to data and safeguards for third country transfers);

(d)     Article 16 (right to rectification);

(e)     Article 17(1) and (2) (right to erasure);

(f)     Article 18(1) (restriction of processing);

(g)     Article 19 (notification obligation regarding rectification or erasure of personal data or restriction of processing);

(h)     Article 20(1) and (2) (right to data portability);

(i)     Article 21(1) (objections to processing);

(j)     Article 5 (general principles) so far as its provisions correspond to the rights and obligations provided for in the provisions mentioned in sub-paragraphs (a) to (i).

Functions designed to protect the public etc


The listed GDPR provisions do not apply to personal data processed for the purposes of discharging a function that—

(a)     is designed as described in column 1 of the Table, and

(b)     meets the condition relating to the function specified in column 2 of the Table,

to the extent that the application of those provisions would be likely to prejudice the proper discharge of the function.

Description of

Popular documents