Statute
Section 106 — Data Protection Act 2018: Processing under the authority of the controller or processor
Text of the provision Official document
Processing under the authority of the controller or processor 106 A processor, and any person acting under the authority of a controller or processor, who has access to personal data may not process the data except—
a on instructions from the controller, or b to comply with a legal obligation.
Official source: legislation.gov.uk
There are no decisions in our collection citing this provision yet. As new judgments are published, they will appear here.
Search case law on this topic
See judgments from UK courts and tribunals with a plain-English summary and legal holding.
Explore case law →