Do the DPA2018 exemptions work properly?
Do you know what? I am beginning to wonder whether some of the exemptions in Schedule 2 of the DPA2018 work as they should. So, if you disagree with the following analysis please make a counter argument. First, I think all the exemptions that are constructed using the use of the word “processed” provide a lawful basis for one controller to disclose personal data to another controller for the purposes/reasons identified in the exemption. In this way, the exemptions permit a




