Data Protection Act 2018

79National security: certificateU.K.

This section has no associated Explanatory Notes

F1(1). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1(2). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

F1(3). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

[F2(3A)Subject to subsection (5), a certificate signed by a Minister of the Crown certifying that exemption from all or any of the provisions listed in section 78A(2) is, or at any time was, required in relation to any personal data for the purposes of safeguarding national security is conclusive evidence of that fact.]

(4)A certificate issued under [F3subsection (3A)—

(a)may identify the personal data to which it applies by means of a general description, and

(b)]may be expressed to have prospective effect.

(5)Any person directly affected by the issuing of a certificate under [F4subsection (3A)] may appeal to the Tribunal against the certificate.

(6)If, on an appeal under subsection (5), the Tribunal finds that, applying the principles applied by a court on an application for judicial review, the Minister did not have reasonable grounds for issuing the certificate, the Tribunal may —

(a)allow the appeal, and

(b)quash the certificate.

(7)Where in any proceedings under or by virtue of this Act, it is claimed by a controller that [F5a certificate under subsection (3A) which identifies the personal data to which it applies by means of a general description applies to any personal data], any other party to the proceedings may appeal to the Tribunal on the ground that [F6the certificate does not apply to the personal data in question].

(8)But, subject to any determination under subsection (9), [F7the certificate] is to be conclusively presumed [F8so to apply].

(9)On an appeal under subsection (7), the Tribunal may determine that the certificate does not so apply.

(10)A document purporting to be a certificate under [F9subsection (3A)] is to be—

(a)received in evidence, and

(b)deemed to be such a certificate unless the contrary is proved.

(11)A document which purports to be certified by or on behalf of a Minister of the Crown as a true copy of a certificate issued by that Minister under [F10subsection (3A)] is—

(a)in any legal proceedings, evidence of that certificate, and

(b)in any legal proceedings in Scotland, sufficient evidence of that certificate.

(12)The power conferred by [F11subsection (3A)] on a Minister of the Crown is exercisable only by—

(a)a Minister who is a member of the Cabinet, or

(b)the Attorney General or the Advocate General for Scotland.

F12(13). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Textual Amendments

F1S. 79(1)-(3) omitted (5.9.2025) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(a), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

F2S. 79(3A) inserted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(b), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

F3Words in s. 79(4) substituted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(c), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

F4Words in s. 79(5) substituted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(d), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)

F5Words in s. 79(7) substituted (5.9.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 88(8)(e)(i), 142(1); S.I. 2025/996, reg. 2(1)(b) (with reg. 4)