Data Protection Act 2018 (c. 12) – Section 60 – Processing under the authority of the controller or processor
Sections
Section 60Processing under the authority of the controller or processor
A processor, and any person acting under the authority of a controller or processor, who has access to personal data may not process the data except—
- (a)on instructions from the controller, or
- (b)to comply with a legal obligation.
https://dpa2018.digiphile.law/article/article-60.html
Text as at 18 September 2026.
This is an unofficial convenience version of the Data Protection Act 2018. It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.