Section 93(4)

Where personal data relating to a data subject is collected by or on behalf of the controller from a person other than the data subject, the requirement in subsection (1) has effect, in relation to the personal data so collected, with the following exceptions— the requirement does not apply in relation to processing that is authorised by an enactment; the requirement does not apply in relation to the data subject if giving the information to the data subject would be impossible or involve disproportionate effort.

← 3 · All articles · 94 →

Source: legislation.gov.uk · retrieved 2026-09-04