Section 55 — Data Protection Act 2018: Overview and scope

Overview and scope 55 1 This Chapter—

a sets out the general obligations of controllers and processors (see sections 56 to 65);

b sets out specific obligations of controllers and processors with respect to security (see section 66);

c sets out specific obligations of controllers and processors with respect to personal data breaches (see sections 67 and 68);

d makes provision for the designation, position and tasks of data protection officers (see sections 69 to 71);

e makes provision about codes of conduct (see section 71A).

2 This Chapter applies only in relation to the processing of personal data for a law enforcement purpose.

3 Where a controller is required by any provision of this Chapter to implement appropriate technical and organisational measures, the controller must (in deciding what measures are appropriate) take into account—

a the latest developments in technology, b the cost of implementation, c the nature, scope, context and purposes of processing, and d the risks for the rights and freedoms of individuals arising from the processing.