Section 42(4)

The record maintained by the controller under section 61(1) and, where the sensitive processing is carried out by a processor on behalf of the controller, the record maintained by the processor under section 61(3) must include the following information— whether the sensitive processing is carried out in reliance on the consent of the data subject or, if not, which condition in Schedule 8 is relied on, how the processing satisfies section 35 (lawfulness of processing), and whether the personal data is retained and erased in accordance with the policies described in subsection (2)(b) and, if it is not, the reasons for not following those policies.

← 3 · All articles · 5 →

Source: legislation.gov.uk · retrieved 2026-09-04