Schedule 2, Part 1, paragraph 3(1)

The UK GDPR provisions listed in sub-paragraph (3) do not apply to personal data which consists of a classification applied to the data subject as part of a risk assessment system falling within sub-paragraph (2) to the extent that the application of those provisions would prevent the system from operating effectively.

← 3 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04