Section 24(6)
DPA 2018
Data Protection Act 2018 · United Kingdom
Subsection (5)(b) does not remove the controller's obligation to confirm whether or not personal data concerning the data subject is being processed unless the estimated cost of complying with that obligation alone in relation to the personal data would exceed the appropriate maximum.
← 5 · All articles · 7 →
Source: legislation.gov.uk · retrieved 2026-09-04