Schedule 4 | Lawfulness of processing: recognised legitimate interests

(1)In the UK GDPR, at the end insert— ANNEX 1 LAWFULNESS OF PROCESSING: RECOGNISED LEGITIMATE INTERESTS Disclosure for purposes of processing described in Article 6(1)(e) This condition is met where— a the processing is necessary for the purposes of making a disclosure of personal data to another person in response to a request from the other person, and b the request states that the other person needs the personal data for the purposes of carrying out processing described in Article 6(1)(e) that has a legal basis that satisfies Article 6(3). National security, public security and defence 2 This condition is met where the processing is necessary— a for the purposes of safeguarding national security, b for the purposes of protecting public security, or c for defence purposes. Emergencies 3 This condition is met where the processing is necessary for the purposes of responding to an emergency. 4 In paragraph 3, “emergency” has the same meaning as in Part 2 of the Civil Contingencies Act 2004. Crime 5 This condition is met where the processing is necessary for the purposes of— a detecting, investigating or preventing crime, or b apprehending or prosecuting offenders. Safeguarding vulnerable individuals 6 This condition is met where the processing is necessary for the purposes of safeguarding a vulnerable individual. 7 In paragraph 6— “safeguarding”, in relation to a vulnerable individual, means— protecting a vulnerable individual from neglect or physical, mental or emotional harm, or protecting the physical, mental or emotional well-being of a vulnerable individual; “vulnerable individual” means an individual— aged under 18, or aged 18 or over and at risk. 8 For the purposes of paragraph 7— a protection of an individual, or of the well-being of an individual, includes both protection relating to a particular individual and protection relating to a type of individual, and b an individual aged 18 or over is “at risk” if the controller has reasonable cause to suspect that the individual— i has needs for care and support, ii is experiencing, or at risk of, neglect or physical, mental or emotional harm, and iii as a result of those needs is unable to protect themselves against the neglect, harm or risk.