Schedule 2, Part 5, paragraph 26(9)

For the purposes of this paragraph, the listed GDPR provisions are the following provisions of the UK GDPR (which may be exempted or derogated from by virtue of Article 85(2) of the UK GDPR)— in Chapter II of the UK GDPR (principles)— Article 5(1)(a) to (e) (principles relating to processing); Article 6 (lawfulness); Article 7 (conditions for consent); Article 8(1) and (2) (child's consent); Article 9 (processing of special categories of data); Article 10 (data relating to criminal convictions etc); Article 11(2) (processing not requiring identification); in Chapter III of the UK GDPR (rights of the data subject)— Article 13(1) to (3) (personal data collected from data subject: information to be provided); Article 14(1) to (4) (personal data collected other than from data subject: information to be provided); Article 15(1) to (3) (confirmation of processing, access to data and safeguards for third country transfers); Article 16 (right to rectification); Article 17(1) and (2) (right to erasure); Article 18(1)(a), (b) and (d) (restriction of processing); Article 19 (notification obligation regarding rectification or erasure of personal data or restriction of processing); Article 20(1) and (2) (right to data portability); Article 21(1) (objections to processing); in Chapter IV of the UK GDPR (controller and processor)— Article 34(1) and (4) (communication of personal data breach to the data subject); Article 36 (requirement for controller to consult Commissioner prior to high risk processing); in Chapter V of the UK GDPR (transfers of data to third countries etc), Article 44A (general principles for transfers); . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

← 8 · All articles · 27 →

Source: legislation.gov.uk · retrieved 2026-09-04