Section 96(2)
DPA 2018
Data Protection Act 2018 · United Kingdom
Subsection (1) does not prevent such a decision being made on that basis if— the decision is required or authorised by law, the data subject has given consent to the decision being made on that basis, or the decision is a decision taken in the course of steps taken— for the purpose of considering whether to enter into a contract with the data subject, with a view to entering into such a contract, or in the course of performing such a contract.
← 1 · All articles · 3 →
Source: legislation.gov.uk · retrieved 2026-09-04