Section 36(1)

The second data protection principle is that— the law enforcement purpose for which personal data is collected (whether from the data subject or otherwise) must be specified, explicit and legitimate, and personal data so collected must not be processed by or on behalf of a controller in a manner that is incompatible with the purpose for which the controller collected it.

← 36 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04