Research, Archival & Statistical Exemption
The research exemption covers necessary research, archiving or statistical processing subject to conditions and prescribed standards.
It does not cover processing used to make a decision specific to an individual. A research label alone is insufficient; the Act does not universally prescribe particular anonymisation algorithms.
Practical application
Document the research purpose, safeguards and absence of individual decisions.
Common questions and examples
Is research, archiving or statistical processing automatically exempt?
No. Section 17(2)(b) concerns processing necessary for these purposes where the data will not be used to make a decision specific to a Data Principal and the prescribed standards are followed. Rule 16 and the Second Schedule set the standards. Calling a project research does not establish the exemption.
How does aggregate research differ from an individual decision?
Studying an overall trend and using a person's record to decide their loan eligibility are different activities. A project that affects a named person's eligibility cannot rely on this exemption merely because it also produces statistics. Document the intended outputs, access limits and applicable conditions before choosing a processing ground.
Related concepts
Official sources and editorial review
Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .
Put privacy knowledge into practice
Explore consent, data inventory and rights-request workflows with DPDPA Shield.