Victims and Prisoners Act 2024 affects UK GDPR requirements on exemptions and disclosures
Original title: Victims and Prisoners Act 2024 effect on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)
The Victims and Prisoners Act 2024 has introduced amendments that affect how UK GDPR applies to requests for access to personal data in victim and prisoner cases. Organisations handling personal data for law enforcement and victim protection purposes must now consider additional exemptions and disclosure restrictions introduced by this Act. These changes may affect how data controllers respond to data subject access requests when victim or prisoner safety is at risk.
What changed
- The Victims and Prisoners Act 2024 introduces new exemptions from subject access rights under UK GDPR for data processed for victim and prisoner protection purposes
- Data controllers may now withhold personal data in response to access requests where disclosure could jeopardise victim or prisoner safety or ongoing investigations related to victim protection
- New provisions affect the scope of information that must be provided when refusing data subject access requests in victim and prisoner cases
Who is affected
Law enforcement authorities, victim support organisations, and data controllers processing personal data related to crime victims and prisoners in the United Kingdom
Summary generated by a language model; the official text prevails. Not legal advice.