Regulation (EU) 2016/679 of the European Parliament and of the CouncilShow full title

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

[F1Article 11AU.K.Further provision about processing of special categories of personal data

1.The Secretary of State may by regulations—

(a)make provision so that an additional description of processing of personal data is subject to the prohibition in Article 9(1),

(b)make provision so that added processing is not subject to that prohibition,

(c)make provision so that an exception in Article 9(2) may or may not be relied on in connection with added processing, and

(d)make provision varying such an exception as it applies in connection with added processing.

2.In paragraph 1, “added processing” means a description of processing which is subject to the prohibition in Article 9(1) by virtue of provision made under paragraph 1(a).

3.Regulations made under this Article (in reliance on Article 91A(4)(b)) may amend section 5, 205 or 206 of the 2018 Act (interpretation).

4.Regulations under this Article are subject to the affirmative resolution procedure.]

Textual Amendments

F1Art. 11A inserted (19.6.2025 for specified purposes, 20.8.2025 in so far as not already in force) by Data (Use and Access) Act 2025 (c. 18), ss. 74(1), 142(1)(2)(h); S.I. 2025/904, reg. 2(c)