Reuse of personal data for a new purpose
According to the second data protection principle (cf. Schedule 1, part 1 (2)), personal data shall be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or purposes. However, the second part of this principle does not apply to the further processing of personal data made only for research purposes (University of Bristol 2014a). Research activity is exempt from this requirement provided that it has met all the conditions for exemption for research, history and statistics purposes (cf. Section 33 of the DPA). See: Conditions for exemption for research purposes
Third country transfers:
According to the 8th data protection principle (Schedule 1 Part I paragraph 8), personal data may not be transferred to a third country that does not provide for an adequate level of protection. However, a limited exemption for research, history and statistics is offered in Section 33 of the DPA. The further processing of personal data for these purposes is not to be considered incompatible with the purposes for which the data were obtained, provided that “the relevant conditions” (which are that the data are not processed to support measures or decisions with respect to particular individual, and the processing is not likely to cause substantial damage or substantial distress to any data subject) are met (Beyleveld et. al.:410).
The UK Data Protection Act 1998:
Beyleveld, D., Grubb, A. Townend, D., Morgan, R. and Wrigh, J. 2004. “The UK’s Implementation of Directive 95/46/EC”, Beyleveld, D, Townend, D., Rouille-Mirza, S. and Wright, J. (eds.). Implementation of the Data Protection Directive in Relation to Medical Research in Europe. Aldershot: Ashgate, pp. 403-428.
University of Bristol 2014a. Research Guidelines: Section 33 exemption [Internet], University of Bristol. Available at: http://www.bris.ac.uk/secretary/dataprotection/research/guidelines.html, [accessed on June 19 2014.]