Section 77(2)

In Article 14 of the UK GDPR (information to be provided where personal data is not obtained from the data subject)— in paragraph 5— for “shall not apply where and insofar as” substitute “do not apply to the extent that”, omit point (b), omit the “or” at the end of point (c), in point (d), omit “where”, and after that point insert— providing the information is impossible or would involve a disproportionate effort, or the obligation referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of the processing for which the personal data are intended. at the end insert— For the purposes of paragraph 5(e), whether providing the information would involve a disproportionate effort depends on, among other things, the number of data subjects, the age of the personal data and any appropriate safeguards applied to the processing. A controller relying on paragraph 5(e) or (f) must take appropriate measures to protect the data subject’s rights, freedoms and legitimate interests, including by making the information available publicly.

← 1 · All articles · 78 →

Source: legislation.gov.uk · retrieved 2026-09-04