Schedule 3, Part 2, paragraph 4(2)

The listed GDPR provisions do not apply to data concerning health to the extent that complying with the request would disclose information— which was provided by the data subject in the expectation that it would not be disclosed to the person making the request, which was obtained as a result of any examination or investigation to which the data subject consented in the expectation that the information would not be so disclosed, or which the data subject has expressly indicated should not be so disclosed.

← 1 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04