Section 55(3)

Where a controller is required by any provision of this Chapter to implement appropriate technical and organisational measures, the controller must (in deciding what measures are appropriate) take into account— the latest developments in technology, the cost of implementation, the nature, scope, context and purposes of processing, and the risks for the rights and freedoms of individuals arising from the processing.

← 2 · All articles · 56 →

Source: legislation.gov.uk · retrieved 2026-09-04