Section 28(2)

Article 32 of the UK GDPR (security of processing) does not apply to a controller or processor to the extent that the controller or the processor (as the case may be) is processing personal data to which the UK GDPR applies for— the purpose of safeguarding national security, or defence purposes.

← 1 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04