Schedule 19, Part 2, paragraph 344(3)

After paragraph (6) insert— In this regulation— “the data protection principles” means the principles set out in— Article 5(1) of the GDPR, section 34(1) of the Data Protection Act 2018, and section 85(1) of that Act; “the GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10), (11) and (14) of that Act); “personal data” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2) and (14) of that Act). In determining for the purposes of this regulation whether the lawfulness principle in Article 5(1)(a) of the GDPR would be contravened by the disclosure of information, Article 6(1) of the GDPR (lawfulness) is to be read as if the second sub-paragraph (disapplying the legitimate interests gateway in relation to public authorities) were omitted.

← 2 · All articles · 345 →

Source: legislation.gov.uk · retrieved 2026-09-04