(h) in subsection (11), for “subsection (1)” substitute “subsection (3A)” ,
(i) in subsection (12), for “subsection (1)” substitute “subsection (3A)” , and
(j) omit subsection (13).
(9) In section 110(2) (intelligence services processing: national security)—
(a) in paragraph (a), after “Chapter 2” insert “of this Part” ,
(b) in paragraph (b), after “Chapter 3” insert “of this Part” , and
(c) in paragraph (c), after “Chapter 4” insert “of this Part” .
(10) In section 186(3) (data subject’s rights etc: exceptions), after paragraph (c) insert—
“ (ca) in Part 3 of this Act, section 78A, and ” .
(11) In the provisions listed in subsection (12), for “subsection (4) of that section” substitute “section 45(4) or 78A of that Act” .
(12) The provisions are—
(a) section 40(4A)(b) and (5B)(d) of the Freedom of Information Act 2000 (personal data which is exempt information);
(b) section 38(3A)(b) of the Freedom of Information (Scotland) Act 2002 (asp 13) (personal data which is exempt information);
(c) regulation 13(3A)(b) and (5B)(d) of the Environmental Information Regulations 2004 ( S.I. 2004/3391 ) (restriction on disclosure of personal data);
(d) regulation 11(4A)(b) of the Environmental Information (Scotland) Regulations 2004 ( S.S.I. 2004/520 ) (restriction on disclosure of personal data);
(e) regulation 45(1C)(b) of the Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005 ( S.I. 2005/2042 ) (personal data which is sensitive information);
(f) regulation 39(1C)(b) of the Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005 ( S.S.I. 2005/494 ) (personal data which is sensitive information).
I159 S. 88 not in force at Royal Assent, see s. 142(1)
I160 S. 88 in force at 5.9.2025 by S.I. 2025/996 , reg. 2(1)(b) (with reg. 4 )
Intelligence services U.K.
89 Joint processing by intelligence services and competent authorities U.K.
(1) Part 4 of the 2018 Act (intelligence services processing) is amended as follows.
(2) In section 82 (processing to which Part 4 applies)—
(a) before subsection (1) insert—
“ (A1) This Part—
(a) applies to processing of personal data by an intelligence service, and