Chapter IIPrinciples
- Article 5Principles relating to processing of personal data
1. Personal data shall be: (a) processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’); (b) collected (whether from…
- Article 6Lawfulness of processing
1. Processing shall be lawful only if and to the extent that at least one of the following applies: (a) the data subject has given consent to the…
- Article 7Conditions for consent
1. Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data.…
- Article 8Conditions applicable to child's consent in relation to information society services
1. Where point (a) of Article 6(1) applies, in relation to the offer of information society services directly to a child, the processing of the personal data of…
- Article 8ZAChild’s consent in relation to information society services: age verification
1. The Secretary of State may by regulations make provision about verifying— (a) that a data subject who has given consent to the processing of his or her…
- Article 8APurpose limitation: further processing
1. This Article is about the determination, for the purposes of Article 5(1) (b) (purpose limitation), of whether processing of personal data by or on behalf of a…
- Article 9Processing of special categories of personal data
1. Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data…
- Article 10Processing of personal data relating to criminal convictions and offences
1. Processing of personal data relating to criminal convictions and offences or related security measures based on Article 6(1) shall be carried out only under the control of…
- Article 11Processing which does not require identification
1. If the purposes for which a controller processes personal data do not or do no longer require the identification of a data subject by the controller, the…
- Article 11AFurther provision about processing of special categories of personal data
1. The Secretary of State may by regulations— (a) make provision so that an additional description of processing of personal data is subject to the prohibition in Article…
https://uk-gdpr.digiphile.law/chapter/chapter-II.html
Text as at 17 September 2026.
This is an unofficial convenience version of the UK GDPR (Regulation (EU) 2016/679 as retained in UK law). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.