Second Schedule
Standards for State processing and for the research exemption
The seven standards that State processing under Section 7(b) and exempt research processing must both meet.
Read this before you cite anything here
These pages are a plain-English restatement, written to help you find the right provision and understand what it asks of you. They are not the text of the statute, and nothing here should be quoted as though it were. Section and rule numbers are exact, and every page names its source.
What it says
- 01
- Processing must be lawful, limited to the purpose it was collected for, limited to the data necessary, accurate where it is used to make a decision, retained no longer than necessary, secured by reasonable safeguards, and accountable to a person responsible for the processing.
Read next
Rule 5Processing for State subsidy, benefit, service or licenceApplies the Second Schedule standards to State processing under Section 7(b) and defines the terms that trigger it.Rule 16Exemption for research, archiving and statistical purposesDisapplies the Act to research, archiving and statistical processing carried on in line with the Second Schedule standards.s.7Certain legitimate usesThe closed list of situations where personal data may be processed without consent, from voluntary provision to medical emergencies and employment.s.17ExemptionsLists where most of the Act is switched off, including legal claims, regulatory functions, offshore contracts and research.
The DPDP brief
One email a month. What moved in the Act, and what our scans found.
Second Schedule is not in force yet. If that date moves, or the Board says anything about how it will be read, you will get one email about it and nothing else.