Section 187(2)

In relation to the processing of personal data to which the UK GDPR does not apply, a body or other organisation which meets the conditions in subsections (3) and (4), if authorised to do so by a data subject, may exercise some or all of the following rights of a data subject on the data subject's behalf— the right under section 164A (complaints to the controller); rights under section 165 (complaints to the Commissioner); rights under section 166(2) (orders for the Commissioner to progress complaints); rights under section 167(1) (compliance orders); the right to bring judicial review proceedings against the Commissioner.

← 1 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04