VadeLab
StatuteData Protection Act 2018

Section 129 — Data Protection Act 2018: Consensual audits

Text of the provision Official document

Consensual audits 129 1 The Commissioner's functions under Article 58(1) of the UK GDPR and paragraph 1 of Schedule 13 include power, with the consent of a controller or processor, to carry out an assessment of whether the controller or processor is complying with good practice in the processing of personal data.

2 The Commissioner must inform the controller or processor of the results of such an assessment.

3 In this section, “ good practice in the processing of personal data ” has the same meaning as in section 124A .

Official source: legislation.gov.uk

There are no decisions in our collection citing this provision yet. As new judgments are published, they will appear here.

Search case law on this topic

See judgments from UK courts and tribunals with a plain-English summary and legal holding.

Explore case law →

Statutory text from an official public source. Informational content — does not replace advice from a qualified solicitor.