lexiara

Schedule 1, Part 2, paragraph 13(3)

DPA 2018
Data Protection Act 2018 · United Kingdom

The condition in sub-paragraph (1) is met even if, when the processing is carried out, the controller does not have an appropriate policy document in place (see paragraph 5 of this Schedule).

· All articles ·

Source: legislation.gov.uk · retrieved 2026-09-04