Skip to main content
Privacy Track
Category: Scope & Exemptions

Archiving in the Public Interest

Also known as: Public interest archiving, Processing for archiving purposes in the public interest
Simply put

Archiving in the public interest refers to processing personal data in order to preserve records of lasting value so they remain available for the future. This typically supports purposes such as maintaining society's recorded memory, evidence, and information, and enabling long-term accountability and research. It is treated as a distinct purpose under data protection law, subject to specific safeguards.

Formal definition

Under the GDPR (and the UK GDPR), archiving in the public interest is recognised as one of the further-processing purposes addressed in Article 89, alongside scientific or historical research purposes and statistical purposes. Guidance from bodies such as the ICO and The National Archives characterises it as processing intended to secure the permanent preservation, availability and usability of records of enduring value, recorded memory, evidence and information, for general public interest. Article 89 requires that such processing be subject to appropriate safeguards for the rights and freedoms of data subjects, and Recital 156 provides interpretive context for these purposes. The regime permits certain further processing and, subject to conditions, associated derogations, but the precise scope and available derogations depend on national implementing law and member state derogations, which can vary; practitioners should verify the applicable safeguards and conditions against the current official text and relevant regulator guidance. Note that whether a given activity qualifies as archiving in the public interest is subject to assessment and is not automatically satisfied by any long-term retention of records.

Why it matters

Archiving in the public interest addresses a tension at the heart of data protection: the principles of storage limitation and purpose limitation generally push organisations to delete personal data once its original purpose is exhausted, yet certain records carry enduring value for society's recorded memory, evidence, and accountability. Recognising archiving in the public interest as a distinct purpose under Article 89 of the GDPR (and the UK GDPR) allows institutions such as public archives, libraries, and other custodians of records to preserve materials of lasting value without those records being routinely erased, provided appropriate safeguards for the rights and freedoms of data subjects are in place.

For organisations that hold records of historical, evidential, or cultural significance, the framing matters because it can support certain further processing and, subject to conditions, associated derogations from some data subject rights and obligations. However, the availability and scope of those derogations depend heavily on national implementing law and member state derogations, which can vary. Practitioners should not assume that a uniform position applies across the EU and the UK, and should verify the applicable safeguards and conditions against the current official text and relevant regulator guidance.

Equally important is that the label is not self-certifying. Whether a given activity genuinely qualifies as archiving in the public interest is subject to assessment and is not automatically satisfied by any long-term retention of records. Treating ordinary business retention as public interest archiving risks mischaracterising the processing and relying on safeguards or derogations that may not apply, so a considered analysis against guidance from bodies such as the ICO and The National Archives is typically warranted.

Who it's relevant to

Public archives and records custodians
National and local archives, and other bodies charged with preserving records of enduring value, are among the principal beneficiaries of this framing. Guidance from The National Archives describes archiving in the public interest as securing the permanent availability of recorded memory, evidence and information, which aligns closely with the mission of such institutions. They typically need to demonstrate the enduring value of retained records and implement the Article 89 safeguards.
Data protection officers and compliance leads
DPOs and compliance teams within organisations holding potentially archival records must assess whether processing qualifies as archiving in the public interest rather than ordinary retention, since the label is subject to assessment and not automatically satisfied by any long-term retention. They should map applicable safeguards and any available derogations against national implementing law, which can vary.
Researchers and those enabling long-term accountability
Because associated purposes can include enabling research and long-term accountability, those who rely on archived records for historical, evidential, or research use are affected by how the archiving purpose and its safeguards are applied. The interaction between archiving and the separate research provisions under Article 89 should be considered on the facts.
Legal advisers to cultural and heritage institutions
Lawyers advising libraries, museums, and heritage bodies need to identify which further-processing purpose applies, confirm the correct safeguards, and check member state derogations. Given divergence between the EU and UK regimes and between national laws, advisers should verify positions against the current official text and relevant regulator guidance rather than treating any single interpretation as settled.

Inside Archiving in the Public Interest

Archiving in the Public Interest as a Processing Purpose
A recognised purpose under the GDPR that typically benefits from specific accommodations, reflecting the value of retaining records for societal, historical, scientific, statistical, or cultural reasons. It is generally treated alongside scientific or historical research purposes and statistical purposes in the Regulation, though the precise contours can be shaped by member state or UK national implementing law.
Compatibility with the Original Purpose
Further processing for archiving in the public interest is generally not considered incompatible with the purpose for which data were initially collected, subject to appropriate safeguards. This affects, but does not automatically satisfy, the purpose limitation analysis, and the position should be assessed case by case.
Appropriate Safeguards
Archiving in the public interest is typically conditioned on safeguards for the rights and freedoms of data subjects, which commonly include technical and organisational measures such as data minimisation and, where the purpose can still be met, pseudonymisation. The specific safeguards required may be elaborated by national implementing law and should be verified against the current official text.
A Legal Basis Is Still Required
Designating a purpose as archiving in the public interest does not itself supply an Article 6 legal basis, and for special category data it does not remove the need for a separate Article 9 condition. A distinct lawful basis and, where relevant, an additional condition must generally be identified.
Possible Derogations from Data Subject Rights
Member state or UK national law may, subject to conditions and safeguards, provide derogations from certain data subject rights where their exercise would render impossible or seriously impair the archiving purpose. The availability and scope of such derogations vary by jurisdiction and should not be assumed.

Common questions

Answers to the questions practitioners most commonly ask about Archiving in the Public Interest.

Does archiving in the public interest remove the need for a lawful basis under Article 6?
No. Archiving in the public interest is not itself a standalone lawful basis for processing under Article 6. It is a recognised purpose that can benefit from certain provisions and derogations, but a controller must still identify an appropriate Article 6 basis (for example, public task or legitimate interests, subject to assessment). Where special category data under Article 9 is involved, an additional Article 9 condition is also required. The reader should verify the applicable conditions against the current official text and any relevant national implementing law.
Does treating processing as archiving in the public interest exempt an organisation from all data protection obligations?
No. The regime does not create a blanket exemption. It can, subject to appropriate safeguards, permit derogations from or modifications to certain data subject rights and from the purpose limitation and storage limitation principles in defined circumstances. Core obligations such as security, having a lawful basis, and implementing safeguards generally continue to apply. The precise scope of any derogation depends on the GDPR text, member state derogations, and applicable national law, which can vary, so the boundaries should be checked case by case.
What safeguards should typically be in place before relying on the archiving in the public interest provisions?
Appropriate safeguards for the rights and freedoms of data subjects are generally expected. These commonly include technical and organisational measures directed at data minimisation, and in some cases pseudonymisation where that serves the archiving purpose without preventing it. The specific safeguards required, and whether certain measures are mandatory, can depend on national implementing law and applicable guidance, so the exact requirements should be verified against the current official text for your jurisdiction.
How does an organisation assess whether its activity genuinely qualifies as archiving in the public interest?
This typically involves an assessment of the purpose and nature of the archiving activity rather than a self-applied label. Relevant considerations often include whether the archiving serves a recognised public-interest function and how it is characterised under applicable national law, since member states may set out further conditions. Because there can be divergence between regulators and national implementations, and the boundary of the concept is not uniformly settled, organisations should document their reasoning and, where uncertain, seek to confirm the position against current guidance.
Can data subject rights be restricted for archived data, and if so which ones?
In defined circumstances, and subject to appropriate safeguards, certain rights may be derogated from or modified where their exercise would render impossible or seriously impair the achievement of the archiving purpose. The specific rights that may be affected, and the extent of any restriction, are governed by the GDPR provisions and by national implementing law, which can vary between member states and between the EU and UK regimes. Controllers should identify precisely which derogations are available in their jurisdiction rather than assuming rights are broadly disapplied.
How should archiving in the public interest interact with the storage limitation principle and retention practices?
The storage limitation principle generally restricts retention to what is necessary for the purposes of processing. Archiving in the public interest is recognised as a purpose for which personal data may, subject to appropriate safeguards, be retained for longer periods. This does not amount to unlimited retention; the extended retention should be tied to the archiving purpose and supported by the required safeguards. Because national derogations and guidance can affect the position, organisations should document retention decisions and verify the applicable conditions against the current official text.

Common misconceptions

Labelling processing as archiving in the public interest means you no longer need a legal basis or consent.
The purpose is distinct from the lawful basis. An Article 6 basis is still generally required, and special category data typically needs a separate Article 9 condition. Consent is only one possible basis and is not a universal requirement for archiving.
Archiving in the public interest automatically switches off all data subject rights.
Any restriction of rights depends on derogations that member state or UK national law may provide, subject to conditions and safeguards. These derogations vary between jurisdictions, are not automatic, and should be checked against the applicable implementing law.
Because further processing for archiving is treated as compatible, no additional safeguards are needed.
The compatibility accommodation is generally conditioned on appropriate safeguards for data subjects, such as data minimisation and pseudonymisation where feasible. Compatibility is subject to assessment rather than guaranteed.

Best practices

Document why the processing qualifies as archiving in the public interest and how it differs from your original collection purpose, keeping the analysis available for accountability.
Identify and record a distinct Article 6 legal basis, and where special category data is involved, confirm and document a separate Article 9 condition rather than relying on the archiving purpose alone.
Implement appropriate technical and organisational safeguards, applying data minimisation and using pseudonymisation where the archiving purpose can still be achieved.
Check the specific member state or UK national implementing law before relying on any derogation from data subject rights, since availability and scope vary by jurisdiction.
Assess purpose compatibility on a case-by-case basis rather than treating the archiving accommodation as automatic, and note any recognised uncertainty in your records.
Verify article references, applicable safeguards, and any derogations against the current official Regulation text and current regulator guidance before acting.