DSAR Exemptions: Journalism, Research and Archiving

DSAR Exemptions Journalism Research and Archiving

Both share the same underlying standard. This is an impairment test, not a convenience test. Neither exists to make life easier for the organisation processing the data.

This guide explains what the DSAR journalism and research exemption requires in practice. It also explains how ProvePrivacy’s DSAR Redaction Tool supports a defensible, evidenced assessment.

What is the DSAR journalism and research exemption?

The DSAR journalism and research exemption is really two separate protections operating under one umbrella. These are the special purposes exemption for journalism, academic, artistic and literary work, and the research, statistics and archiving exemption. Both are impairment tests, not convenience tests.

What does the special purposes limb cover for journalism?

Personal data processed for journalism, academic, artistic or literary purposes can be exempt from the right of access where three conditions are met together.

  • The processing is carried out with a view to publication.
  • The controller reasonably believes publication is in the public interest.
  • The controller reasonably believes that complying with the access request would be incompatible with those purposes.

All three conditions need to be met together. None is sufficient on its own. A genuine public interest belief without an incompatibility argument, for example, will not be enough.

What does the research, statistics and archiving limb cover?

Personal data processed for scientific or historical research, statistical purposes, or archiving in the public interest can be exempt from the right of access. This applies to the extent that applying the right would seriously impair the achievement of that purpose.

The relevant safeguards under UK GDPR Article 89(1) must also be in place. Crucially, the results must not be used to support measures or decisions about particular individuals. If they are, the exemption does not apply.

How do you apply the DSAR journalism and research exemption correctly?

  • Document the specific purpose being protected — a named research project, publication, or archive.
  • Show how disclosure would seriously impair or be incompatible with that specific purpose.
  • Keep the required Article 89(1) safeguards in place and evidenced for research and archiving data.

What goes wrong when the DSAR journalism and research exemption is misapplied?

The most common error is applying either exemption as a blanket policy. Examples include treating all data held by a research team, or all data connected to any editorial process, as automatically exempt.

Both exemptions require a case-by-case assessment against the specific purpose in question. A research exemption claimed without documented Article 89(1) safeguards is unlikely to survive an ICO complaint.

A practical example of the DSAR journalism and research exemption

Consider a university running a longitudinal health study that receives a SAR from a former participant. The study database includes coded responses and internal analysis notes.

The research, statistics and archiving limb may apply, but only if disclosure would seriously impair the study. The university must show the Article 89(1) safeguards are in place, such as pseudonymisation of participant records.

If any of the coded data was later used to make a decision about that specific participant, the exemption would no longer apply to that data. A documented, purpose-specific rationale is what makes the DSAR journalism and research exemption defensible if the ICO investigates.

Frequently asked questions about the DSAR journalism and research exemption

Does the journalism exemption apply to any content connected to publication? No. Three conditions must be met together: a view to publication, a reasonable public interest belief, and a reasonable incompatibility belief. A blanket claim without all three will fail.

Can a research team treat all of its data as automatically exempt? No. Each item needs its own assessment against the specific research purpose, and the required Article 89(1) safeguards must be evidenced and in place.

What happens if research results are used to make decisions about a person? The research, statistics and archiving exemption stops applying. Using results to support a measure or decision about a particular individual takes the processing outside the exemption.

Is a public interest belief enough on its own for the journalism limb? No. A genuine public interest belief is only one of three conditions. Without the view-to-publication and incompatibility conditions too, the exemption does not apply.

Key takeaways on the DSAR journalism and research exemption

  • The exemption is two separate protections: special purposes (journalism/academic/artistic/literary) and research/statistics/archiving.
  • The journalism limb needs three conditions met together, not just a genuine public interest belief.
  • The research limb needs Article 89(1) safeguards evidenced and in place, such as pseudonymisation.
  • Using research results to decide something about a specific person removes that data from the exemption.
  • Assess each item against its specific purpose — a blanket policy claim is unlikely to survive an ICO complaint.

Why getting the DSAR journalism and research exemption right matters

Journalism and research teams often hold sensitive, high-volume datasets. Applying this exemption incorrectly, in either direction, creates real risk. Under-protecting a live investigation can compromise sources or a study’s integrity.

Over-claiming the exemption, without the required safeguards evidenced, is equally risky. It exposes the organisation to an ICO complaint and undermines the requester’s statutory right of access. A documented, purpose-specific process is what keeps both risks in check.

Manual assessment vs a structured DSAR redaction tool

Factor Manual, ad hoc assessment ProvePrivacy DSAR Redaction Tool
Distinguishing journalism from research/archiving Easy to conflate two different legal tests Structured exemption library keeps each test separate
Evidencing the impairment test Rationale often undocumented Documented decision and rationale per redaction
Tracking Article 89(1) safeguards Manual, easy to overlook Built into the assessment workflow

How does ProvePrivacy help with the DSAR journalism and research exemption?

ProvePrivacy is the affordable GDPR compliance software built for data protection teams in resource-constrained, mid-market organisations. It’s a genuine OneTrust alternative, with all modules included and unlimited users.

Its DSAR management software includes a built-in DSAR Redaction Tool, available as standard to every client. It keeps journalism and research/archiving assessments clearly separated, with a documented rationale for every decision.

Book a demo today to see how ProvePrivacy’s RoPA, risk, incident and DSAR modules work together in one governed platform.

Sources

Scroll to Top

Contact us

If you would like to ask more questions or to arrange training, complete the form below and we will respond shortly.

Prefer to schedule a 15 minute call? Schedule call today >>

See our Privacy Statement for more details.