Section 44(2)

The controller must also, in specific cases for the purpose of enabling the exercise of a data subject's rights under this Part, give the data subject the following— information about the legal basis for the processing; information about the period for which the personal data will be stored or, where that is not possible, about the criteria used to determine that period; where applicable, information about the categories of recipients of the personal data (including recipients in third countries or international organisations); such further information as is necessary to enable the exercise of the data subject's rights under this Part.

← 1 · All articles · 3 →

Source: legislation.gov.uk · retrieved 2026-09-04 · Text as consolidated on 2026-06-19; changes after this date are not shown.