Section 105

This section applies to the use by a controller of a processor to carry out processing of personal data on behalf of the controller. The controller may use only a processor who undertakes— to implement appropriate measures that are sufficient to secure that the processing complies with this Part; to provide to the controller such information as is necessary for demonstrating that the processing complies with this Part. If a processor determines, in breach of this Part, the purposes and means of processing, the processor is to be treated for the purposes of this Part as a controller in respect of that processing.

← 3 · All articles · 1 →

Source: legislation.gov.uk · retrieved 2026-09-04