Skip to main content
Home

The Research, Archiving and Statistics Provisions

Contents

Latest updates - 27 February 2026

27 February 2026 - this draft guidance was published.

About this guidance

This guidance discusses the research, archiving and statistics (RAS) provisions in UK data protection law in detail. It is aimed at data protection officers (DPOs) and those with specific data protection responsibilities in organisations undertaking research, archiving or processing for statistical purposes.

It provides guidance on how these provisions work and sets out our understanding of the provisions’ key terms.

It explains how the RAS provisions relate to the data protection principles and grounds for processing. It also details the exemptions set out in the provisions. It summarises the key points you need to know and answers frequently asked questions.

In places, the guidance provides examples to illustrate how a specific provision might apply. These are not fully worked case studies. They do not address every aspect of regulatory compliance that organisations are subject to.

Many research projects are very complex, involving multiple organisations often in different countries. It is likely that you are subject to a range of regulatory requirements, depending on your sector and your type of research-related activity. This guidance does not cover all of these issues.

This guidance focuses specifically on the use of the RAS provisions. We are not presenting this guidance as a comprehensive guide to data protection compliance for researchers. You should therefore read this guidance in conjunction with our other guidance, as well as sectoral guidance, where available.

For broader guidance on data protection compliance, see our Guide to Data Protection.

How to use this guidance

To help you to understand the law and good practice as clearly as possible, this guidance says what organisations must, should, and could do to comply.

Legislative or legal requirements

Must refers to:

  • legislative requirements within our remit; or
  • established case law (for the laws that we regulate) that's binding.

Good practice

Should doesn't refer to a legislative requirement, but what we expect you to do to comply effectively with the law. We expect you to do this unless there's a good reason not to. If you choose to take a different approach, you need to be able to demonstrate that this approach also complies with the law.

Could refers to an option or example that you may consider to help you to comply effectively. There are likely to be various other ways for you to comply.

This approach only applies where indicated in our guidance. We will update other guidance in due course.

Contents

What are the research, archiving and statistics provisions?

What is research related processing?

In detail

What requirements and safeguards must we have in place?

In detail

How do the RAS provisions affect the principles and grounds for processing?

In detail

What are the exemptions for research?

In detail