Section 207(2)
DPA 2018
Data Protection Act 2018 · United Kingdom
In the case of the processing of personal data to which Part 2 does not apply, it applies where such processing is carried out in the context of the activities of an establishment of a controller or processor in the United Kingdom, whether or not the processing takes place in the United Kingdom.
← 1A · All articles · 3 →
Source: legislation.gov.uk · retrieved 2026-09-04