{
  "url": "https://openlegislation.uk/national-assembly-for-wales-commission-crown-status-order-2007/article-5",
  "json_url": "https://openlegislation.uk/national-assembly-for-wales-commission-crown-status-order-2007/article-5.json",
  "legislation": "uksi/2007/1118",
  "legislation_title": "The National Assembly for Wales Commission (Crown Status) Order 2007",
  "legislation_url": "https://openlegislation.uk/national-assembly-for-wales-commission-crown-status-order-2007",
  "path": "article/5",
  "kind": "article",
  "number": "5",
  "heading": "Data Protection Act 2018",
  "text": "(1) The Assembly Commission is to be treated as a Crown body for the purposes of the Data Protection Act 2018 to the extent specified in this article.\n(2) The Assembly Commission is to be treated as a government department for the purposes of the following provisions—\n(a) section 8(d) (lawfulness of processing under the UK GDPR: public interest etc),\n(b) section 209 (application to the Crown),\n(c) paragraph 6 of Schedule 1 (statutory etc and government purposes),\n(d) paragraph 7 of Schedule 2 (exemptions from the UK GDPR: functions designed to protect the public etc), and\n(e) paragraph 8(1)(o) of Schedule 3 (exemptions from the UK GDPR: health data).\n(3) In the provisions mentioned in paragraph (4)—\n(a) references to employment by or under the Crown are to be treated as including employment as a member of staff of the Assembly Commission, and\n(b) references to a person in the service of the Crown are to be treated as including a person so employed.\n(4) The provisions are—\n(a) section 24(3) (exemption for certain data relating to employment under the Crown), and\n(b) section 209(6) (application of certain provisions to a person in the service of the Crown).\n(5) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Art. 5 substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 324 (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)"
    },
    {
      "type": "F",
      "label": "F2",
      "text": "Words in art. 5(2)(a) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 64(a) (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)"
    },
    {
      "type": "F",
      "label": "F3",
      "text": "Words in art. 5(2)(d) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 64(a) (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)"
    },
    {
      "type": "F",
      "label": "F4",
      "text": "Words in art. 5(2)(e) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 64(a) (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)"
    },
    {
      "type": "F",
      "label": "F5",
      "text": "Art. 5(5) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 3 para. 64(b) (with Sch. 3 para. 112); 2020 c. 1, Sch. 5 para. 1(1)"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/uksi/2007/1118/article/5",
    "retrieved_at": "2026-10-29T03:55:35.937060+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}