Section 87(3)

Personal data collected by a controller for one purpose may be processed for any other purpose of the controller that collected the data or any purpose of another controller provided that— the controller is authorised by law to process the data for that purpose, and the processing is necessary and proportionate to that other purpose.

← 2 · All articles · 4 →

Source: legislation.gov.uk · retrieved 2026-09-04