# Data Protection Act 2018, Paragraph 19


The listed GDPR provisions do not apply to personal data that consists of—
(a) information in respect of which a claim to legal professional privilege or, in Scotland, confidentiality of communications, could be maintained in legal proceedings, or
(b) information in respect of which a duty of confidentiality is owed by a professional legal adviser to a client of the adviser.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/2/paragraph/19 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-2/paragraph-19
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.