21 Processing to which this Chapter applies [Definitions]
21 Processing to which this Chapter applies [Definitions]

(1)     This Chapter applies to the automated or structured processing of personal data in the course of—

(a)     an activity which is outside the scope of European Union law, or

(b)     an activity which falls within the scope of Article 2(2)(b) of the GDPR (common foreign and security policy activities),

provided that the processing is not processing by a competent authority for any of the law enforcement purposes (as defined in Part 3) or processing to which Part 4 (intelligence services processing) applies.

(2)     This Chapter also applies to the manual unstructured processing of personal data held by an FOI public authority.