This guide covers the SAR exemptions for crime, law and public protection under the Data Protection Act 2018.
A subject access request can land on your desk in the middle of an active criminal investigation, a tax enquiry, or an immigration case. Do you disclose everything the requester is asking for, or is some of it protected? This is exactly where the SAR exemptions for crime, law and public protection come in, and getting the answer right matters more than most data protection teams realise.
The Data Protection Act 2018 allows an organisation to withhold personal data where disclosure would prejudice the prevention or detection of crime, the collection of tax, the maintenance of immigration control, or a small number of related public protection functions. But this exemption is deliberately narrow. It only applies to the extent that genuine prejudice would occur, not as a blanket reason to refuse an entire case file.
Why the crime, law and public protection exemption exists
The SAR exemptions for crime, law and public protection exist so that live investigations, ongoing enquiries and regulatory functions are not compromised simply because a data subject has exercised their right of access. Without this protection, a criminal investigation could be tipped off, a tax enquiry undermined, or an informant exposed, purely as a side effect of routine compliance.
This guide covers the five separate bases behind this exemption, each with its own scope and its own prejudice test, and explains why the phrase to the extent means partial disclosure, not outright refusal, is usually the correct outcome.
Once you have worked out what genuinely needs to stay confidential, applying that decision accurately across a real case file is the next challenge. The ProvePrivacy platform’s DSAR Redaction Tool, available to every client, is built to apply exemptions like these directly against a case, so a live investigation can be protected without withholding the whole file. Download the full guide below to see exactly where the line sits.