Part 2: General processing Chapter 2: The GDPR Section 19: Processing for archiving, research and statistical purposes: safeguards
Article 89(1) of the GDPR requires appropriate safeguards for the processing of personal data in support of archiving, scientific or historical research purposes and statistical purposes. The 1998 Act required those relying on the "research exemptions" in section 33 of that Act to comply with certain safeguards to ensure that personal data would not be processed by researchers to support measures or decisions with respect to particular individuals, and would not be processed in a way likely to cause substantial damage or distress to any data subject. This section replicates these safeguards.
	Subsection (1) confirms the scope of provision to processing which is necessary for archiving in the public interest, scientific or historical research purposes, and statistical purposes.
	Subsection (2) sets out that processing personal data for scientific or historical research purposes, statistical purposes, or for archiving in the public interest is prohibited where the processing causes substantial damage or distress to the data subject.
	Subsection (3) sets out that processing personal data for scientific or historical research purposes, statistical purposes, or for archiving in the public interest is prohibited where the personal data is processed to support a decision being made about the subject, unless it is carried out for the purposes of approved medical research. Subsection (4) defines the meaning of "approved medical research".