Schedule 1, Part 2, paragraph 10(2)

If the processing consists of the disclosure of personal data to a competent authority, or is carried out in preparation for such disclosure, the condition in sub-paragraph (1) is met even if, when the processing is carried out, the controller does not have an appropriate policy document in place (see paragraph 5 of this Schedule).

← 1 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04