Section 36(3)
DPA 2018
Data Protection Act 2018 · United Kingdom
Personal data collected for a law enforcement purpose may be processed for any other law enforcement purpose (whether by the controller that collected the data or by another controller) provided that— the controller is authorised by law to process the data for the other purpose, and the processing is necessary and proportionate to that other purpose.
← 2 · All articles · 4 →
Source: legislation.gov.uk · retrieved 2026-09-04