(6) Schedule 5 to this Act inserts Annex 2 to the UK GDPR.
(7) The 2018 Act is amended in accordance with subsections (8) to (10).
(8) In section 36(1) (the second data protection principle)—
(a) in paragraph (a), for “on any occasion” substitute “(whether from the data subject or otherwise)” , and
(b) in paragraph (b)—
(i) after “processed” insert “by or on behalf of a controller” , and
(ii) for “it was collected” substitute “the controller collected it” .
(9) In section 87(1) (the second data protection principle)—
(10) In paragraph 1 of Schedule 2 (exemptions etc from the UK GDPR: provisions to be adapted or restricted), omit sub-paragraph (b)(ii).
I125 S. 71 in force at Royal Assent for specified purposes, see s. 142(1)(2) (h)
I126 S. 71 in force at 5.2.2026 in so far as not already in force by S.I. 2026/82 , reg. 2(d)
72 Processing in reliance on relevant international law U.K.
(2) In Article 6(3) (lawfulness of processing: basis in domestic law)—
(a) in the first subparagraph, omit “and (e)”,
(b) after that subparagraph insert—
“ The basis for the processing referred to in point (e) of paragraph 1 must be laid down by domestic law or relevant international law (see section 9A of the 2018 Act). ” , and
(c) in the last subparagraph, in the last sentence, after “domestic law” insert “or relevant international law” .
(3) In Article 8A(3)(e) (purpose limitation: further processing necessary to safeguard an objective listed in Article 23(1)) (inserted by section 71 of this Act), at the end insert “or by relevant international law (see section 9A of the 2018 Act)” .
(4) In Article 9 (processing of special categories of personal data)—
(a) in paragraph 2(g) (substantial public interest), after “domestic law” insert “, or relevant international law,” , and
(b) in paragraph 5, before point (a) insert—
“ (za) section 9A makes provision about when the requirement in paragraph 2(g) of this Article for a basis in relevant international law is met; ” .
(5) In Article 10 (processing of personal data relating to criminal convictions and offences)—
(a) in paragraph 1, after “domestic law” insert “, or relevant international law,” , and
(b) in paragraph 2, before point (a) insert—
“ (za) section 9A makes provision about when the requirement in paragraph 1 of this Article for authorisation by relevant international law is met; ” .