The Commissioner must prepare a strategy for carrying out the Commissioner's functions under the data protection legislation in accordance with the Commissioner's duties under—
sections 120A and 120B,
section 108 of the Deregulation Act 2015 (exercise of regulatory functions: economic growth), and
section 21 of the Legislative and Regulatory Reform Act 2006 (exercise of regulatory functions: principles).
The Commissioner must—
review the strategy from time to time, and
revise the strategy as appropriate.
The Commissioner must publish the strategy and any revised strategy.