Section 6(2)

For the purposes of the UK GDPR, where personal data is processed only— the person on whom the obligation to process the data is imposed by the enactment (or, if different, one of the enactments) is the controller. for purposes for which it is required by an enactment to be processed, and by means by which it is required by an enactment to be processed,

← 1 · All articles · 7 →

Source: legislation.gov.uk · retrieved 2026-09-04