Schedule 2, Part 1, paragraph 2(3)

Controller 2 is exempt from the obligations in the following provisions of the UK GDPR— to the same extent that Controller 1 is exempt from those obligations by virtue of sub-paragraph (1). Article 13(1) to (3) (personal data collected from data subject: information to be provided), Article 14(1) to (4) (personal data collected other than from data subject: information to be provided), Article 15(1) to (3) (confirmation of processing, access to data and safeguards for third country transfers), and Article 5 (general principles) so far as its provisions correspond to the rights and obligations provided for in the provisions mentioned in paragraphs (a) to (c),

← 2 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04