Section 57(3)

Each controller must implement appropriate technical and organisational measures for ensuring that, by default, only personal data which is necessary for each specific purpose of the processing is processed.

← 2 · All articles · 4 →

Source: legislation.gov.uk · retrieved 2026-09-04