Notification handbook
Section 4
Notification exemptions
The Act provides an exemption from notification for some data controllers. Exemptions are possible for the following.
- Data controllers who only process personal information for:
- staff administration (including payroll);
- advertising, marketing and public relations (in connection with your own business activity); and
- accounts and records.
- Some not-for-profit organisations.
- Processing personal information for personal, family or household affairs (including recreational purposes).
- Data controllers who only process personal information for the maintenance of a public register.
- Data controllers who do not process personal information on computer.
Individuals who are processing personal information for personal, family or household affairs are exempt from notification and most of the other provisions of the Data Protection Act 1998.
However, other data controllers who are exempt from notification must still comply with the other provisions of the Act.
More detailed guidance about the notification exemptions can be found in Notification exemptions: A self-assessment guide. This publication has been reproduced in this handbook and can be found in Section 6.1.
Any data controller who believes that they may be exempt must refer to this guidance and not rely on the brief summary given above.