Data Protection Act 2018 (c. 12)

SCHEDULES

SCHEDULE 3 U.K. Exemptions etc from the [F1 UK GDPR]: health, social work, education and child abuse data

Textual Amendments

F1 Words in Sch. 3 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(2) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

PART 4 U.K. Education data

Restriction of Article 15 of the [F2 UK GDPR]: prior opinion of Principal Reporter U.K.

Textual Amendments

F2 Words in Sch. 3 para. 20 cross-heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(18) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

20 (1) This paragraph applies where— U.K.

(a) a question arises as to whether a controller who is an education authority is obliged by Article 15(1) to (3) of the [F3 UK GDPR] (confirmation of processing, access to data and safeguards for third country transfers) to disclose education data, and

(b) the controller believes that the data—

(i) originated from or was supplied by or on behalf of the Principal Reporter acting in pursuance of the Principal Reporter's statutory duties, and

(ii) is not data which the data subject is entitled to receive from the Principal Reporter.

(2) The controller must inform the Principal Reporter of the fact that the question has arisen before the end of the period of 14 days beginning when the question arises.

(3) Article 15(1) to (3) of the [F4 UK GDPR] (confirmation of processing, access to data and safeguards for third country transfers) do not permit the controller to disclose the data to the data subject unless the Principal Reporter has informed the controller that, in the opinion of the Principal Reporter, the serious harm test is not met with respect to the data.

Textual Amendments

F3 Words in Sch. 3 para. 20(1)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(19) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)

F4 Words in Sch. 3 para. 20(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(19) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)