Section 103(2)

A controller must implement appropriate technical and organisational measures which are designed to ensure that— the data protection principles are implemented, and risks to the rights and freedoms of data subjects are minimised.

← 1 · All articles · 104 →

Source: legislation.gov.uk · retrieved 2026-09-04