http://www.legislation.gov.uk/id/ukpga/2018/12/schedule/2/enacted

SCHEDULES

SCHEDULE 2Exemptions etc from the GDPR

PART 2Restrictions based on Article 23(1): restrictions of rules in Articles 13 to 21 and 34

13Parliamentary privilege

The listed GDPR provisions and Article 34(1) and (4) of the GDPR (communication of personal data breach to the data subject) do not apply to personal data where this is required for the purpose of avoiding an infringement of the privileges of either House of Parliament.