Repository logo

The UK GDPR, the Immigration Exception and Brexit: Interrogating Open Rights Group v Secretary of State for the Home Department and its Aftermath

Accepted version

No Thumbnail Available



Change log


jats:pThis note explores the holding, context and aftermath of the judgments which declared the so‐called ʻimmigration exceptionʼ set out in the UK Data Protection Act 2018 incompatible with, and assumed it subject to, the (UK) General Data Protection Regulation (GDPR) restrictions clause (article 23). The subsequent limitation of this exemption's use to the government is impactful in itself. However, this case has much wider significance. Firstly, the finding that the restrictions clause mandates granular specificity places in jeopardy many exemptions not only in the UK but also in EU States. Secondly, the assumption that this article was engaged is questionable since, as reworded post‐Brexit, it is restricted to limitations laid down in delegated legislation. Nevertheless, this rewording depended on powers limited to addressing post‐Brexit technical ʻdeficienciesʼ and so is jats:italicultra vires</jats:italic>. The Court of Appeal should have addressed this in order to vindicate the rule of law and separation of powers.</jats:p>



48 Law and Legal Studies, 4806 Private Law and Civil Obligations, 4807 Public Law, 16 Peace, Justice and Strong Institutions

Journal Title

Modern Law Review

Conference Name

Journal ISSN


Volume Title