Section 66(1)

Each controller and each processor must implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks arising from the processing of personal data.

← 66 · All articles · 2 →

Source: legislation.gov.uk · retrieved 2026-09-04