Data Protection Act 1998 (c. 29)

SCHEDULES

SCHEDULE 4 U.K. Cases where the eighth principle does not apply

3 U.K. The transfer is necessary—

(a) for the conclusion of a contract between the data controller and a person other than the data subject which—

(i) is entered into at the request of the data subject, or

(ii) is in the interests of the data subject, or

(b) for the performance of such a contract.