Section 104Joint controllers

(1) Where two or more [^F1controllers] jointly determine the purposes and means of processing personal data, they are joint controllers for the purposes of this Part.

(2) Joint controllers must, in a transparent manner, determine their respective responsibilities for compliance with this Part by means of an arrangement between them, except to the extent that those responsibilities are determined under or by virtue of an enactment.

(3) The arrangement must designate the controller which is to be the contact point for data subjects.

Amended text

This Section is shown as amended by the Data (Use and Access) Act 2025 (c. 18), among other instruments (see the annotations below) (commenced provisions as at 30 September 2026, ELI), as incorporated in the text in force on 30 September 2026 as published on legislation.gov.uk.

Annotations

Textual Amendments

F1 Word in s. 104(1) substituted (17.11.2025) by Data (Use and Access) Act 2025 (c. 18), ss. 90(6), 142(1); S.I. 2025/996, reg. 2(2)(b)

Commencement Information

I1 S. 104 in force at 16.9.2019 by S.I. 2019/1188, reg. 2(d)

https://dpa2018.digiphile.law/article/article-104.html

Text as at 18 September 2026.

This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.