Data Protection Act 2018

[F1UK GDPR] provisions to be adapted or restricted: “the listed GDPR provisions”U.K.

1U.K.In this Part of this Schedule, “the listed GDPR provisions” means—

(a)the following provisions of the [F2UK GDPR] (the rights and obligations in which may be restricted by virtue of Article 23(1) of the [F2UK GDPR])—

(i)Article 13(1) to (3) (personal data collected from data subject: information to be provided);

(ii)Article 14(1) to (4) (personal data collected other than from data subject: information to be provided);

(iii)Article 15(1) to (3) (confirmation of processing, access to data and safeguards for third country transfers);

(iv)Article 16 (right to rectification);

(v)Article 17(1) and (2) (right to erasure);

(vi)Article 18(1) (restriction of processing);

(vii)Article 19 (notification obligation regarding rectification or erasure of personal data or restriction of processing);

(viii)Article 20(1) and (2) (right to data portability);

(ix)Article 21(1) (objections to processing);

(x)Article 5 (general principles) so far as its provisions correspond to the rights and obligations provided for in the provisions mentioned in sub-paragraphs (i) to (ix); and

(b)the following provisions of the [F3UK GDPR] (the application of which may be adapted by virtue of Article 6(3) of the [F3UK GDPR])—

(i)Article 5(1)(a) (lawful, fair and transparent processing), other than the lawfulness requirements set out in Article 6;

(ii)Article 5(1)(b) (purpose limitation).