Section 173(5)
DPA 2018
Data Protection Act 2018 · United Kingdom
It is a defence for a person charged with an offence under subsection (3) to prove that— the alteration, defacing, blocking, erasure, destruction or concealment of the information would have occurred in the absence of a request made in exercise of a data subject access right, or the person acted in the reasonable belief that the person making the request was not entitled to receive the information in response to the request.
← 4 · All articles · 174 →
Source: legislation.gov.uk · retrieved 2026-09-04