{
  "url": "https://openlegislation.uk/data-protection-act-2018/schedule-3/paragraph-5",
  "json_url": "https://openlegislation.uk/data-protection-act-2018/schedule-3/paragraph-5.json",
  "legislation": "ukpga/2018/12",
  "legislation_title": "Data Protection Act 2018",
  "legislation_url": "https://openlegislation.uk/data-protection-act-2018",
  "path": "schedule/3/paragraph/5",
  "kind": "paragraph",
  "number": "5",
  "heading": null,
  "text": "(1) Article 15(1) to (3) of the UK GDPR (confirmation of processing, access to data and safeguards for third country transfers) do not apply to data concerning health to the extent that the serious harm test is met with respect to the data.\n(2) A controller who is not a health professional may not rely on sub-paragraph (1) to withhold data concerning health unless the controller has obtained an opinion from the person who appears to the controller to be the appropriate health professional to the effect that the serious harm test is met with respect to the data.\n(3) An opinion does not count for the purposes of sub-paragraph (2) if—\n(a) it was obtained before the beginning of the relevant period, or\n(b) it was obtained during that period but it is reasonable in all the circumstances to re-consult the appropriate health professional.\n(4) In this paragraph, “the relevant period” means the period of 6 months ending with the day on which the opinion would be relied on.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Words in Sch. 3 para. 5(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 2 para. 93(7) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)"
    },
    {
      "type": "I",
      "label": "I1",
      "text": "Sch. 3 para. 5 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)"
    }
  ],
  "outstanding_effects": [
    {
      "type": "words substituted",
      "affecting": "nia/2022/18",
      "affecting_title": "Adoption and Children Act (Northern Ireland) 2022"
    },
    {
      "type": "words substituted",
      "affecting": "nia/2022/18",
      "affecting_title": "Adoption and Children Act (Northern Ireland) 2022"
    },
    {
      "type": "added",
      "affecting": "nia/2022/18",
      "affecting_title": "Adoption and Children Act (Northern Ireland) 2022"
    },
    {
      "type": "words substituted",
      "affecting": "ukpga/2023/48",
      "affecting_title": "Veterans Advisory and Pensions Committees Act 2023"
    }
  ],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/3/paragraph/5",
    "retrieved_at": "2026-10-29T09:04:55.804064+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}