Section 170(1)

It is an offence for a person knowingly or recklessly— to obtain or disclose personal data without the consent of the controller, to procure the disclosure of personal data to another person without the consent of the controller, or after obtaining personal data, to retain it without the consent of the person who was the controller in relation to the personal data when it was obtained.

← 170 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04