Section 103(2)

A controller must implement appropriate technical and organisational measures which are designed to ensure that— the data protection principles are implemented, and risks to the rights and freedoms of data subjects are minimised.

← 1 · All articles · 104 →

Source: legislation.gov.uk · retrieved 2026-09-04 · Text as consolidated on 2026-06-19; changes after this date are not shown.