Data (Use and Access) Act 2025, Schedule 4: the recognised legitimate interests (Annex 1) (Data (Use and Access) Act 2025 c. 18, Sch 4 (new UK GDPR Annex 1))
Annex 1 covers public-task requests, national security, emergencies, crime and safeguarding. There is no condition for commercial licensing or AI training, so a UK holder cannot use this basis for a licence.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“This condition is met where- (a) the processing is necessary for the purposes of making a disclosure of personal data to another person in response to a request from the other person, and (b) the request states that the other person needs the personal data for the purposes of carrying out processing described in Article 6(1)(e) that has a legal basis that satisfies Article 6(3). National security, public security and defence 2. This condition is met where the processing is necessary- (a) for the purposes of safeguarding national security, (b) for the purposes of protecting public security, or (c) for defence purposes.”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide