Schedule 1, Part 2, paragraph 12(1)

This condition is met if— the processing is necessary for the purposes of complying with, or assisting other persons to comply with, a regulatory requirement which involves a person taking steps to establish whether another person has— committed an unlawful act, or been involved in dishonesty, malpractice or other seriously improper conduct, in the circumstances, the controller cannot reasonably be expected to obtain the consent of the data subject to the processing, and the processing is necessary for reasons of substantial public interest.

← 12 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04