Section 9A — Data Protection Act 2018: Processing in reliance on relevant international law

Processing in reliance on relevant international law 9A 1 Processing of personal data meets the requirement in Article 6(3), 8A(3)(e), 9(2)(g) or 10(1) of the UK GDPR for a basis in, or authorisation by, relevant international law only if it meets a condition in Schedule A1.

2 A condition in Schedule A1 may be relied on for the purposes of any of those provisions, unless that Schedule provides otherwise.

3 The Secretary of State may by regulations amend Schedule A1 by adding, varying or omitting—

a conditions, b provision about the purposes for which a condition may be relied on, and c safeguards in connection with processing carried out in reliance on a condition in the Schedule.

4 Regulations under this section may only add a condition relating entirely or partly to a treaty ratified by the United Kingdom.

5 Regulations under this section are subject to the affirmative resolution procedure.

6 In this section, “ treaty ” and “ ratified ” have the same meaning as in Part 2 of the Constitutional Reform and Governance Act 2010 (see section 25 of that Act).