103Data protection by designU.K.
This section has no associated Explanatory Notes
(1)Where a controller proposes that a particular type of processing of personal data be carried out by or on behalf of the controller, the controller must, prior to the processing, consider the impact of the proposed processing on the rights and freedoms of data subjects.
(2)A controller must implement appropriate technical and organisational measures which are designed to ensure that—
(a)the data protection principles are implemented, and
(b)risks to the rights and freedoms of data subjects are minimised.
Commencement Information
I1S. 103 in force at 16.9.2019 by S.I. 2019/1188, reg. 2(c)