Law stated as at 04 May 2020 • European Union, United Kingdom |
Context | EU data protection law | UK data protection law |
Processing data to comply with health and safety obligations | Article 6(1)(c) General Data Protection Regulation (GDPR); Article 9(2)(b) GDPR. | Section 10(2) Data Protection Act 2018 (DPA 2018) Paragraph 1, Schedule 1, DPA 2018. (An appropriate policy document and extended records of processing is required to comply with this condition; see Standard document, Appropriate policy document (special categories of personal data and criminal convictions data) (GDPR and DPA 2018) (UK).) |
Processing to protect the vital interests of employees | Article 6(1)(d) GDPR; Article 9(2)(c) GDPR. | GDPR provisions. |
Sharing employee data with public health authorities | Article 9(2)(i) GDPR. | Section 10(2) DPA 2018; Paragraph 3, Schedule 1, DPA 2018. |
Context | EU data protection law | UK data protection law |
Processing for the provision of health and social care | Article 9(2)(h) GDPR; Article 9(3) GDPR. | Section 10(2) DPA 2018; Section 11(1) DPA 2018; Paragraph 2, Schedule 1, DPA 2018. |
Processing for reasons of public interest in the area of public health | Article 9(2)(i) GDPR. | Section 10(2) DPA 2018; Paragraph 3, Schedule 1, DPA 2018. |
Processing for the purposes of research | Article 9(2)(j) GDPR | Section 10(2) DPA 2018; Paragraph 4, Schedule 1, DPA 2018. |
Context | EU data protection law | UK data protection law |
Processing location data | Article 6(1)(e) GDPR; Article 9(2)(g) GDPR; Article 9(2)(i) GDPR; Article 9(2)(j) GDPR; Article 6 ePrivacy Directive; Article 9 ePrivacy Directive. | Section 8 DPA 2018; Section 10(2) DPA 2018; Paragraph 3, Schedule 1, DPA 2018; Paragraph 4 , Schedule 1, DPA 2018; Paragraph 6, Schedule 1, DPA 2018; Regulation 7 Privacy and Electronic Communications Regulations 2003 (PECR 2003); Regulation 14 PECR 2003. |
Use of cookies, SDKs and similar technology | Article 5(3) ePrivacy Directive Article 6(1)(a) GDPR Article 6(1)(f) GDPR [If special category personal data is processed: Article 9(2)(a) GDPR; Article 9(2)(i) GDPR] | GDPR provisions; Section 10(2) DPA 2018; Regulation 6 PECR; Regulation 14 PECR; [If special category personal data is processed: Section 10(2) DPA 2018; Paragraph 3, Schedule 1, DPA 2018] |