Statute
Section 91 — Data Protection Act 2018: The sixth data protection principle
Text of the provision Official document
The sixth data protection principle 91 1 The sixth data protection principle is that personal data must be processed in a manner that includes taking appropriate security measures as regards risks that arise from processing personal data.
2 The risks referred to in subsection (1) include (but are not limited to) accidental or unauthorised access to, or destruction, loss, use, modification or disclosure of, personal data.
Official source: legislation.gov.uk
There are no decisions in our collection citing this provision yet. As new judgments are published, they will appear here.
Search case law on this topic
See judgments from UK courts and tribunals with a plain-English summary and legal holding.
Explore case law →