Schedule 2: Exemptions etc from the GDPR Part 2 – Restrictions based on Article 23(1): restrictions of rules in Articles 13 to 21 and 34
Paragraph 6 sets out the listed GDPR provisions restricted by the exemptions in this Part.
	Paragraph 7 restricts the application of the listed GDPR provisions to personal data processed for the purposes of discharging the functions concerned with the protection of members of the public, charities and fair competition in business, as set out in the table.
	Paragraph 8 restricts the application of the listed GDPR provisions to personal data processed for the purposes of discharging statutory audit functions.
	Paragraph 9 restricts the application of the listed GDPR provisions to personal data processed for the purposes of discharging specified functions of the Bank of England.
	Paragraph 10 restricts the application of the listed GDPR provisions to personal data processed for the purposes of discharging regulatory functions relating to legal services, the health service and children’s services.
	Paragraph 11 restricts the application of the listed GDPR provisions to personal data processed by certain other public bodies for the purposes of discharging their statutory functions, as specified in the table.
	The restrictions in paragraphs 7, 8, 9, 10 and 11 apply to the extent that the processing would be likely to prejudice the proper discharge of those functions. They replace provision under section 31 of the 1998 Act.
	Paragraph 13 restricts the application of the listed GDPR provisions and Article 34(1) and (4) of the GDPR (communication of personal data breach to the data subject) to personal data processed for the purposes of avoiding an infringement of parliamentary privilege. This replicates section 35A of the 1998 Act.
	Paragraph 14(1) restricts the listed GDPR provisions to personal data processed for the purposes of determining a person’s suitability for judicial office or Queen's Counsel.
	Paragraph 14(2) restricts the listed GDPR provisions to personal data processed by an individual acting in a judicial capacity or a court or tribunal acting in its judicial capacity.
	Paragraph 14(3) restricts the listed GDPR provisions in relation to all other personal data to the extent the application of those provisions would be likely to prejudice judicial independence or judicial proceedings. This ensures the administration of justice is not undermined by the application of the GDPR.
	Paragraph 15 restricts the application of the listed GDPR provisions to personal data processed for the purposes of conferring Crown honours, or for the purposes of assessing a person’s suitability for the offices listed in sub-paragraph (2). The Secretary of State may, by regulations, amend that list. Regulations are subject to the affirmative procedure.