Part 4 Restrictions Based on [as Described in] Article 23(1): Restrictions of Rules in Articles 13 to 15

GDPR [UK GDPR] provisions to be restricted: “the listed GDPR provisions”


In this Part of this Schedule, “the listed GDPR provisions” means the following provisions of the GDPR [UK GDPR] (the rights and obligations in which may be restricted by virtue of Article 23(1) of the GDPR [UK GDPR])—

(a)     Article 13(1) to (3) (personal data collected from data subject: information to be provided);

(b)     Article 14(1) to (4) (personal data collected other than from data subject: information to be provided);

(c)     Article 15(1) to (3) (confirmation of processing, access to data and safeguards for third country transfers);

(d)     Article 5 (general principles) so far as its provisions correspond to the rights and obligations provided for in the provisions mentioned in sub-paragraphs (a) to (c).

Legal professional privilege


The listed GDPR provisions do not apply to personal data that consists of—

(a)     information in respect of which a claim to legal professional privilege or, in Scotland, confidentiality of communications, could be maintained in legal proceedings, or

(b)     information in respect of which a duty of confidentiality is owed by a professional legal adviser to a client of the adviser.

Self incrimination


(1)     A person need not comply with the listed GDPR provisions to the extent that compliance would, by revealing evidence of the commission of an offence, expose the person to proceedings for that offence.

(2)     The reference to an offence in sub-paragraph (1) does not include an offence under—

(a)     this Act,

(b)     section 5 of the Perjury Act 1911 (false statements made otherwise than

Popular documents