Part 5Data protection and privacy

Chapter 1Data protection

Safeguards for processing for research etc purposes

87Section 86: consequential provision

(1)

In the UK GDPR—

(a)

in Article 5(1)(e) (storage limitation), for “Article 89(1)” to “data subject” substitute “Article 84B”,

(b)

in Article 9(2)(j) (processing of special categories of personal data), for “in accordance with Article 89(1) (as supplemented by section 19 of the 2018 Act)” substitute “, is carried out in accordance with Article 84B and is”,

(c)

in Article 17(3)(d) (right to erasure), for “Article 89(1)” substitute “Article 84B”, and

(d)

in Article 21(6) (right to object), omit “pursuant to Article 89(1)”.

(2)

In the 2018 Act—

(a)

in section 24(4) (manual unstructured data held by FOI public authorities), after paragraph (b) insert—

“(ba)

Chapter 8A (safeguards for processing for research, archiving or statistical purposes);”,

(b)

in paragraph 4(b) of Schedule 1 (special categories of personal data and criminal convictions etc data: research etc), for “Article 89(1) of the UK GDPR (as supplemented by section 19)” substitute “Article 84B of the UK GDPR”, and

(c)

in Schedule 2 (exemptions etc from the UK GDPR)—

(i)

in paragraph 27(3)(a) (research and statistics), for “Article 89(1) of the UK GDPR (as supplemented by section 19)” substitute “Article 84B of the UK GDPR”, and

(ii)

in paragraph 28(3) (archiving), for “Article 89(1) of the UK GDPR (as supplemented by section 19)” substitute “Article 84B of the UK GDPR”.

(3)

In section 279(2) of the Mental Health (Care and Treatment) (Scotland) Act 2003 (asp 13) (information for research), for “Article 89(1) of the UK GDPR (archiving in the public interest, scientific or historical research and statistics)” substitute “Article 84A of the UK GDPR (research, archives and statistics)”.