lexiara

Schedule 1, Part 2, paragraph 9

DPA 2018
Data Protection Act 2018 · United Kingdom

This condition is met if the processing— subject to the exception in sub-paragraph (3). is of personal data revealing racial or ethnic origin, is carried out as part of a process of identifying suitable individuals to hold senior positions in a particular organisation, a type of organisation or organisations generally, is necessary for the purposes of promoting or maintaining diversity in the racial and ethnic origins of individuals who hold senior positions in the organisation or organisations, and can reasonably be carried out without the consent of the data subject, For the purposes of sub-paragraph (1)(d), processing can reasonably be carried out without the consent of the data subject only where— the controller cannot reasonably be expected to obtain the consent of the data subject, and the controller is not aware of the data subject withholding consent. Processing does not meet the condition in sub-paragraph (1) if it is likely to cause substantial damage or substantial distress to an individual. For the purposes of this paragraph, an individual holds a senior position in an organisation if the individual— holds a position listed in sub-paragraph (5), or does not hold such a position but is a senior manager of the organisation. Those positions are— a director, secretary or other similar officer of a body corporate; a member of a limited liability partnership; a partner in a partnership within the Partnership Act 1890, a limited partnership registered under the Limited Partnerships Act 1907 or an entity of a similar character formed under the law of a country or territory outside the United Kingdom. In this paragraph, “senior manager”, in relation to an organisation, means a person who plays a significant role in— the making of decisions about how the whole or a substantial part of the organisation's activities are to be managed or organised, or the actual managing or organising of the whole or a substantial part of those activities. The reference in sub-paragraph (2)(b) to a data subject withholding consent does not include a data subject merely failing to respond to a request for consent.

· All articles ·

Source: legislation.gov.uk · retrieved 2026-09-04