Schedule 1, Part 2, paragraph 13(3)
DPA 2018
Data Protection Act 2018 · United Kingdom
The condition in sub-paragraph (1) is met even if, when the processing is carried out, the controller does not have an appropriate policy document in place (see paragraph 5 of this Schedule).
← 2 · All articles · 4 →
Source: legislation.gov.uk · retrieved 2026-09-04