# Data Protection Act 2018, Paragraph 31


This condition is met if the processing is carried out—
(a) in the course of its legitimate activities with appropriate safeguards by a foundation, association or other not-for-profit body with a political, philosophical, religious or trade union aim, and
(b) on condition that—
(i) the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes, and
(ii) the personal data is not disclosed outside that body without the consent of the data subjects.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/1/paragraph/31 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-1/paragraph-31
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.