# The National Assembly for Wales Commission (Crown Status) Order 2007, Article 5: Data Protection Act 2018

Extent: E+W+S+N.I.

(1) The Assembly Commission is to be treated as a Crown body for the purposes of the Data Protection Act 2018 to the extent specified in this article.
(2) The Assembly Commission is to be treated as a government department for the purposes of the following provisions—
(a) section 8(d) (lawfulness of processing under the UK GDPR: public interest etc),
(b) section 209 (application to the Crown),
(c) paragraph 6 of Schedule 1 (statutory etc and government purposes),
(d) paragraph 7 of Schedule 2 (exemptions from the UK GDPR: functions designed to protect the public etc), and
(e) paragraph 8(1)(o) of Schedule 3 (exemptions from the UK GDPR: health data).
(3) In the provisions mentioned in paragraph (4)—
(a) references to employment by or under the Crown are to be treated as including employment as a member of staff of the Assembly Commission, and
(b) references to a person in the service of the Crown are to be treated as including a person so employed.
(4) The provisions are—
(a) section 24(3) (exemption for certain data relating to employment under the Crown), and
(b) section 209(6) (application of certain provisions to a person in the service of the Crown).
(5) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

---
Source: https://www.legislation.gov.uk/uksi/2007/1118/article/5 (the official version)
Page: https://openlegislation.uk/national-assembly-for-wales-commission-crown-status-order-2007/article-5
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.