Section 48(1)
DPA 2018
Data Protection Act 2018 · United Kingdom
Where a data subject requests the rectification or erasure of personal data or the restriction of its processing, the controller must inform the data subject in writing— whether the request has been granted, and if it has been refused— of the reasons for the refusal, of the data subject's right to make a request to the Commissioner under section 51, of the data subject’s right to make a complaint to the controller under section 164A, of the data subject's right to lodge a complaint with the Commissioner under section 165, and of the data subject's right to apply to a court under section 167.
← 48 · All articles · 2 →
Source: legislation.gov.uk · retrieved 2026-09-04