Section 35(4)

The first case is where— the data subject has given consent to the processing for the law enforcement purpose as mentioned in subsection (2)(a), and at the time when the processing is carried out, the controller has an appropriate policy document in place (see section 42).

← 3 · All articles · 5 →

Source: legislation.gov.uk · retrieved 2026-09-04