Section 108(1)

If a controller becomes aware of a serious personal data breach in relation to personal data for which the controller is responsible, the controller must notify the Commissioner of the breach without undue delay.

← 108 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04