Part 2: General processing Chapter 3: Other general processing Section 21: Processing to which this Chapter applies
The GDPR does not apply to all processing of personal data within the UK because some types of processing are outside the scope of the GDPR. Article 2(2) of the GDPR deals with matters which are out of scope.
	This Chapter provides for a separate regime to apply to processing in the UK which is outside the scope of the GDPR. Subsection (1) provides that this includes any processing which falls outside the scope of EU law, with the exception of processing by competent bodies for law enforcement purposes or by the intelligence services. Those types of processing are covered by their own regimes in Parts 3 and 4 of this Act.
	Subsection (2) makes it clear that this regime also covers the processing of unstructured, manual data held by a FOI public authority. Such processing was regulated by the 1998 Act (as amended by the 2000 Act), but is not covered by the GDPR, so equivalent provision is needed.
	Definitions of "automated or structured processing of personal data" and "manual unstructured processing of personal data" are set out in subsection (4). Subsection (5) defines the meaning of FOI public authority and subsections (6) and (7) define what is meant by the term "held by an FOI public authority" for the purposes of this Chapter.