Section 209(4)

Where the purposes for which and the manner in which personal data is, or is to be, processed are determined by a person acting on behalf of the Royal Household, the Duchy of Lancaster or the Duchy of Cornwall, the controller in respect of that data for the purposes of the UK GDPR and this Act is— in relation to the Royal Household, the Keeper of the Privy Purse, in relation to the Duchy of Lancaster, such person as the Chancellor of the Duchy appoints, and in relation to the Duchy of Cornwall, such person as the Duke of Cornwall, or the possessor for the time being of the Duchy of Cornwall, appoints.

← 3 · All articles · 5 →

Source: legislation.gov.uk · retrieved 2026-09-04