Section 24(5)

A controller is not obliged to comply with Article 15(1) to (3) of the UK GDPR (right of access by the data subject) in relation to personal data to which the UK GDPR applies by virtue of Article 2(1A) if— the request under Article 15 does not contain a description of the personal data, or the controller estimates that the cost of complying with the request so far as relating to the personal data would exceed the appropriate maximum.

← 4 · All articles · 6 →

Source: legislation.gov.uk · retrieved 2026-09-04