Section 129: Consensual audits

Data Protection Act 2018 · 2018 c. 12View on legislation.gov.uk

Part 5: The Information Commissioner

The Commissioner's functions under Article 58(1) of the UK GDPR and paragraph 1 of Schedule 13 include power, with the consent of a controller or processor, to carry out an assessment of whether the controller or processor is complying with good practice in the processing of personal data.

The Commissioner must inform the controller or processor of the results of such an assessment.

In this section, "good practice in the processing of personal data" has the same meaning as in section 124A.

About this text

This legislation text comes from legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. These source and reuse terms cover the legislation text, not Remedy's commentary.

Reuse reviewed 21 August 2026 under Open Government Licence v3.0.