Exemptions
-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
The guidance on this page is suitable for large businesses in the public, private and third sectors. Small businesses should use the resources on our small business web hub.
Brief guidance
A guide to the data protection exemptions
Data protection exemptions, how they work and a list of available exemptions.
Detailed guidance
Immigration exemption: a guide
The immigration exemption, when and how to apply it, how it impacts individual rights and what happens when an immigration investigation becomes a criminal investigation.
National security and defence: a guide
The national security and defence exemption, how the exemption works and when to apply it, ministerial certificates, special rules for special category data, security obligations and law enforcement processing.
Resources
Training videos: Exemptions
Recordings of ICO staff training on data protection exemptions, available for you to reuse.