Propose a change

Data Protection Act 2018

Write the words of this act the way you think they should read. Solon shows your change as a redline against the published text and pins it to that exact text, so it can never be applied to wording you did not see.

Change 1

What to do with it
As published

28 National security and defence: modifications to Articles 9 and 32 of the UK GDPR

(1) Article 9(1) of the UK GDPR (prohibition on processing of special categories of personal data) does not prohibit the processing of personal data to which the UK GDPR applies to the extent that the processing is carried out— (a) for the purpose of safeguarding national security or for defence purposes, and (b) with appropriate safeguards for the rights and freedoms of data subjects. (2) Article 32 of the UK GDPR (security of processing) does not apply to a controller or processor to the extent that the controller or the processor (as the case may be) is processing personal data to which the UK GDPR applies for— (a) the purpose of safeguarding national security, or (b) defence purposes. (3) Where Article 32 of the UK GDPR does not apply, the controller or the processor must implement security measures appropriate to the risks arising from the processing of the personal data. (4) For the purposes of subsection (3), where the processing of personal data is carried out wholly or partly by automated means, the controller or the processor must, following an evaluation of the risks, implement measures designed to— (a) prevent unauthorised processing or unauthorised interference with the systems used in connection with the processing, (b) ensure that it is possible to establish the precise details of any processing that takes place, (c) ensure that any systems used in connection with the processing function properly and may, in the case of interruption, be restored, and (d) ensure that stored personal data cannot be corrupted if a system used in connection with the processing malfunctions. (5) The functions conferred on the Commission in relation to the UK GDPR by Articles 57(1)(a), (d), (e), (h) and (u) and 58(1)(d) and (2)(a) to (d) of the UK GDPR (which are subject to safeguards set out in section 115) include functions in relation to subsection (3).

Your change, as a redline

28 National security and defence: modifications to Articles 9 and 32 of the UK GDPR

(1) Article 9(1) of the UK GDPR (prohibition on processing of special categories of personal data) does not prohibit the processing of personal data to which the UK GDPR applies to the extent that the processing is carried out— (a) for the purpose of safeguarding national security or for defence purposes, and (b) with appropriate safeguards for the rights and freedoms of data subjects. (2) Article 32 of the UK GDPR (security of processing) does not apply to a controller or processor to the extent that the controller or the processor (as the case may be) is processing personal data to which the UK GDPR applies for— (a) the purpose of safeguarding national security, or (b) defence purposes. (3) Where Article 32 of the UK GDPR does not apply, the controller or the processor must implement security measures appropriate to the risks arising from the processing of the personal data. (4) For the purposes of subsection (3), where the processing of personal data is carried out wholly or partly by automated means, the controller or the processor must, following an evaluation of the risks, implement measures designed to— (a) prevent unauthorised processing or unauthorised interference with the systems used in connection with the processing, (b) ensure that it is possible to establish the precise details of any processing that takes place, (c) ensure that any systems used in connection with the processing function properly and may, in the case of interruption, be restored, and (d) ensure that stored personal data cannot be corrupted if a system used in connection with the processing malfunctions. (5) The functions conferred on the Commission in relation to the UK GDPR by Articles 57(1)(a), (d), (e), (h) and (u) and 58(1)(d) and (2)(a) to (d) of the UK GDPR (which are subject to safeguards set out in section 115) include functions in relation to subsection (3).

One line that says what changes, such as "Halve the dog tax".

Who it helps, what it costs, what it fixes. It is what persuades people to support it.

A proposal here is not law. Support on Solon is evidence that people want the change; the official route says what it takes to make it law.

Sign in to file your proposal. What you have written stays on this page.

Sign in to file it

Think it through

Ask what your change would do, who would gain and who would bear a cost, and where something like it is already law. The assistant reads your draft as it stands, cites the law and the studies it finds, and takes no side. What you file stays yours.

Questions to start with
Think it through
Legal information from the published text, not advice for your case. Check the sources. Find a law · What the register holds