Data (Use and Access) Act 2025, section 86: safeguards for research (new Articles 84B and 84C) (Data (Use and Access) Act 2025 c. 18, s 86 (new UK GDPR Arts 84B and 84C))
The research route needs a necessity condition and safeguards, and fails where the processing is likely to cause substantial damage or distress. Turning records into non-identifying form is itself a listed purpose, which favours de-identify-first.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“Personal data may only be processed for RAS purposes if- (a) the processing consists of the collection of the personal data (whether from the data subject or otherwise), (b) the processing is carried out in order to convert the personal data into information which can be processed in a manner which does not permit the identification of a data subject, or (c) without the processing, the RAS purposes cannot be fulfilled. ... The requirement is not satisfied if the processing is likely to cause substantial damage or substantial distress to a data subject to whom the personal data relates.”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide