Part 3 Restriction Based on Article 23(1): [for the] Protection of Rights of Others

Protection of the rights of others: general

16

(1)     Article 15(1) to (3) of the GDPR [UK GDPR] (confirmation of processing, access to data and safeguards for third country transfers), and Article 5 of the GDPR [UK GDPR] so far as its provisions correspond to the rights and obligations provided for in Article 15(1) to (3), do not oblige a controller to disclose information to the data subject to the extent that doing so would involve disclosing information relating to another individual who can be identified from the information.

(2)     Sub-paragraph (1) does not remove the controller's obligation where—

(a)     the other individual has consented to the disclosure of the information to the data subject, or

(b)     it is reasonable to disclose the information to the data subject without the consent of the other individual.

(3)     In determining whether it is reasonable to disclose the information without consent, the controller must have regard to all the relevant circumstances, including—

(a)     the type of information that would

Popular documents