Section 60

A processor, and any person acting under the authority of a controller or processor, who has access to personal data may not process the data except— on instructions from the controller, or to comply with a legal obligation.

← 8 · All articles · 61 →

Source: legislation.gov.uk · retrieved 2026-09-04