Statute
Section 103 — Data Protection Act 2018: Data protection by design
Text of the provision Official document
Data protection by design 103 1 Where a controller proposes that a particular type of processing of personal data be carried out by or on behalf of the controller, the controller must, prior to the processing, consider the impact of the proposed processing on the rights and freedoms of data subjects.
2 A controller must implement appropriate technical and organisational measures which are designed to ensure that—
a the data protection principles are implemented, and b risks to the rights and freedoms of data subjects are minimised.
Official source: legislation.gov.uk
There are no decisions in our collection citing this provision yet. As new judgments are published, they will appear here.
Search case law on this topic
See judgments from UK courts and tribunals with a plain-English summary and legal holding.
Explore case law →