This is explicitly made an example here: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re...
This is explicitly made an example here: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-re...