UK GDPR / Chapter 1 / Art. 2

UK GDPR

Chapter 1: General provisions

Artikel

zurück zu
Art. 1

weiter zu
Art. 3

Chapter 1: General provisions

Art. 2 Material scope

This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system.
This Regulation does not apply to the processing of personal data:
1. in the course of an activity which falls outside the scope of Union law;
2. by the Member States when carrying out activities which fall within the scope of Chapter 2 of Title V of the TEU;
3. by a natural person in the course of a purely personal or household activity;
4. by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security.
For the processing of personal data by the Union institutions, bodies, offices and agencies, Regulation (EC) No 45/2001 applies. Regulation (EC) No 45/2001 and other Union legal acts applicable to such processing of personal data shall be adapted to the principles and rules of this Regulation in accordance with Article 98.
This Regulation shall be without prejudice to the application of Directive 2000/31/EC, in particular of the liability rules of intermediary service providers in Articles 12 to 15 of that Directive.

zurück zu
Art. 1

weiter zu
Art. 3

Amendments

Amendments of the UK GDPR:

For paragraph 1 substitute—

"1. This Regulation applies to the automated or structured processing of personal data, including—

a processing in the course of an activity which, immediately before exit day, fell outside the scope of EU law, and

b processing in the course of an activity which, immediately before exit day, fell within the scope of Chapter 2 of Title 5 of the Treaty on European Union (common foreign and security policy activities).

1.A. This Regulation also applies to the manual unstructured processing of personal data held by an FOI public authority.".

For paragraph 2 substitute—

"1. This Regulation does not apply to—

a the processing of personal data by an individual in the course of a purely personal or household activity;

b the processing of personal data by a competent authority for any of the law enforcement purposes (see Part 3 of the 2018 Act);

c the processing of personal data to which Part 4 of the 2018 Act (intelligence services processing) applies.”.

Omit paragraph 3.

In paragraph 4, for “Directive 2000/31/EC”(7) to the end substitute “the Electronic Commerce (EC Directive) Regulations 2002(8), in particular the provisions about mere conduits, caching and hosting (see regulations 17 to 19 of those Regulations).”.

After paragraph 4 insert—

5. In this Article—

a the automated or structured processing of personal data’ means—

i the processing of personal data wholly or partly by automated means, and
ii the processing otherwise than by automated means of personal data which forms part of a filing system or is intended to form part of a filing system;

b the manual unstructured processing of personal data’ means the processing of personal data which is not the automated or structured processing of personal data;

c FOI public authority’ has the same meaning as in Chapter 3 of Part 2 of the 2018 Act (see section 21(5) of that Act);

d references to personal data ‘held’ by an FOI public authority are to be interpreted in accordance with section 21(6) and (7) of the 2018 Act;

e competent authority’ and ‘law enforcement purposes’ have the same meaning as in Part 3 of the 2018 Act (see sections 30 and 31 of that Act).