Whilst the Data Protection Act applies generally to everyone, there are some exemptions to take into account special circumstances.
If you are exempt, you will not need to register with the ICO, do not have to grant subject access and can share data with third parties.
Businesses that may be exempt from the Act include:
Entitlement to an exemption depends on your purpose for processing the specific personal data. Each case must be considered individually and you should never assume that your data processing is exempt.
Examples of individual exemptions include:
This list of exemptions is not exhaustive and is included in the Act to deal with specific, individual circumstances.
For more information on exemptions, go to the ICO website at:https://ico.org.uk/for-organisations/guide-to-data-protection/exemptions/