Schedule 3, Part 4, paragraph 20(1)

This paragraph applies where— a question arises as to whether a controller who is an education authority is obliged by Article 15(1) to (3) of the UK GDPR (confirmation of processing, access to data and safeguards for third country transfers) to disclose education data, and the controller believes that the data— originated from or was supplied by or on behalf of the Principal Reporter acting in pursuance of the Principal Reporter's statutory duties, and is not data which the data subject is entitled to receive from the Principal Reporter.

← 20 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04