Section 59(3)
DPA 2018
Data Protection Act 2018 · United Kingdom
The processor used by the controller may not engage another processor (“a sub-processor”) without the prior written authorisation of the controller, which may be specific or general.
← 2 · All articles · 4 →
Source: legislation.gov.uk · retrieved 2026-09-04