Section 57(3)

Each controller must implement appropriate technical and organisational measures for ensuring that, by default, only personal data which is necessary for each specific purpose of the processing is processed.

← 2 · All articles · 4 →

Source: legislation.gov.uk · retrieved 2026-09-04 · Text as consolidated on 2026-06-19; changes after this date are not shown.