Each controller must implement appropriate measures—
to ensure, and
to be able to demonstrate, in particular to the Commissioner,
that the processing of personal data complies with the requirements of this Part.
Section 102: General obligations of the controller
Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk
Part 4: Intelligence services processing — CHAPTER 4: Controller and processor
About this text
This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.
Reuse reviewed 21 August 2026 under Open Government Licence v3.0.