Part 5: Data Protection and Privacy Data protection principles Section 72: Processing in reliance on relevant international law
Under the UK GDPR, the processing of personal data on grounds of public interest under Articles 6(1)(e) and 9(2)(g) is only lawful if the basis of the processing is set out in "domestic law". Similarly, any processing of personal data relating to criminal offences under Article 10 or under the new exemptions to purpose limitation principle in new Article 8A(3)(e) (inserted by section 71 of this Act) must be authorised by domestic law.
	Subsections (1) to (6) of section 72 amend these provisions in the UK GDPR to make it clear that relevant international law can also provide the basis for this processing.
	Subsection (7) inserts new section 9A into the DPA 2018 which provides that the requirement for a basis in or authorisation by relevant international law is met if the processing meets a condition in new Schedule A1 to the DPA 2018.
	The new Schedule A1 lists as a condition that processing is necessary to respond to a request in accordance with the Agreement between the Government of the United Kingdom of Great Britain and Northern Ireland and the Government of the United States of America on Access to Electronic Data for the Purpose of Countering Serious Crime.
	Subsection (7) also provides the Secretary of State with powers to add other conditions relating to international treaties to the new Schedule and amend or vary conditions via regulations, which are subject to the affirmative resolution procedure. The power also allows the addition of safeguards to such processing, which could include duties on controllers or processors to have specific policies or procedures in place or to retain or provide information about the processing.