The Reason Explained
Where the organisation relies on an exemption, the response explains why it applies to the redacted data, not only which exemption it is.
Intent
Naming an exemption says which door the organisation went through. Explaining why it applies to this material is what lets the person judge whether it fits.
How to test it
An assessor scores the criterion against a single response:
- Score 2
- The response explains why the exemption applies to the material withheld, not only which exemption it is.
- Score 1
- The response explains the exemption in general terms without connecting it to what was withheld here.
- Score 0
- The response names the exemption and says no more.
- Not applicable
- The organisation relied on no exemption.
The law it reflects
This criterion reflects Article 5(2) of the UK GDPR. That mapping is a guide, not a legal test: conformance is judged against the criterion, not the article.
See H9 in context in the full standard.