Section 64(1)

Where a type of processing is likely to result in a high risk to the rights and freedoms of individuals, the controller must, prior to the processing, carry out a data protection impact assessment.

← 64 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04