Schedule 3, Part 4, paragraph 20(3)

Article 15(1) to (3) of the UK GDPR (confirmation of processing, access to data and safeguards for third country transfers) do not permit the controller to disclose the data to the data subject unless the Principal Reporter has informed the controller that, in the opinion of the Principal Reporter, the serious harm test is not met with respect to the data.

← 2 · All articles · 21 →

Source: legislation.gov.uk · retrieved 2026-09-04