Section 59(5)

The processing by the processor must be governed by a contract in writing between the controller and the processor setting out the following— the subject-matter and duration of the processing; the nature and purpose of the processing; the type of personal data and categories of data subjects involved; the obligations and rights of the controller and processor.

← 4 · All articles · 6 →

Source: legislation.gov.uk · retrieved 2026-09-04