Section 61(2)

The controller's record must contain the following information— the name and contact details of the controller; where applicable, the name and contact details of the joint controller; where applicable, the name and contact details of the data protection officer; the purposes of the processing; the categories of recipients to whom personal data has been or will be disclosed (including recipients in third countries or international organisations); a description of the categories of— data subject, and personal data; where applicable, details of the use of profiling; where applicable, the categories of transfers of personal data to a third country or an international organisation; an indication of the legal basis for the processing operations, including transfers, for which the personal data is intended; where possible, the envisaged time limits for erasure of the different categories of personal data; where possible, a general description of the technical and organisational security measures referred to in section 66.

← 1 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04