Section 47(2)
DPA 2018
Data Protection Act 2018 · United Kingdom
Where the controller would be required to erase personal data under subsection (1) but the personal data must be maintained for the purposes of evidence, the controller must (instead of erasing the personal data) restrict its processing.
← 1 · All articles · 3 →
Source: legislation.gov.uk · retrieved 2026-09-04