1. Article 14 of the GDPR states that it is not necessary to supply information about the data we process where that information has not been received from the individual concerned and “where the personal data concerned must remain confidential subject to an obligation of professional secrecy regulated by [English] law”.
2. In addition, Schedule 2 of the Data Protection Act 2018 exempts us from providing information about:
2.1 disclosures of personal data to us or by us where the disclosure is:
2.1.1 required by an enactment, a rule of law, or an order of a court;
2.1.2 necessary for the purpose of, or in connection with, legal proceedings (including prospective legal proceedings); or
2.1.3 necessary for the purpose of obtaining legal advice or otherwise establishing, exercising or defending legal rights,
2.1.4 and providing such information to you would prevent the disclosure from taking place; and
2.2 processing of personal data that consists of information in respect of which a claim to legal professional privilege could be maintained in legal proceedings.
3. Other exemptions will relate to the matters on which a Member is asked to advise the Client including:
3.1 negotiations or proceedings between the Client and the data subject;
3.2 matters relating to management forecasting or management planning in relation to the Client;
3.3 certain activities relating to corporate finance.