Section 93(1)
DPA 2018
Data Protection Act 2018 · United Kingdom
The controller must give a data subject the following information— the identity and the contact details of the controller; the legal basis on which, and the purposes for which, the controller processes personal data; the categories of personal data relating to the data subject that are being processed; the recipients or the categories of recipients of the personal data (if applicable); the right to lodge a complaint with the Commissioner under section 165 and the contact details of the Commissioner; how to exercise rights under this Chapter; any other information needed to secure that the personal data is processed fairly and transparently.
← 93 · All articles · 2 →
Source: legislation.gov.uk · retrieved 2026-09-04