Schedule 1, Part 1, paragraph 1(1)

This condition is met if— the processing is necessary for the purposes of performing or exercising obligations or rights which are imposed or conferred by law on the controller or the data subject in connection with employment, social security or social protection, and when the processing is carried out, the controller has an appropriate policy document in place (see paragraph 39 in Part 4 of this Schedule).

← 1 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04