Search Legislation

Data Protection Act 2018

 Help about what version

What Version

  • Latest available (Revised)
  • Original (As enacted)
 Help about advanced features

Advanced Features

 Help about opening options

Opening OptionsExpand opening options

Changes over time for: Cross Heading: Preventing or detecting unlawful acts

 Help about opening options

Alternative versions:

Changes to legislation:

Data Protection Act 2018, Cross Heading: Preventing or detecting unlawful acts is up to date with all changes known to be in force on or before 25 February 2025. There are changes that may be brought into force at a future date. Changes that have been made appear in the content and are referenced with annotations. Help about Changes to Legislation

Preventing or detecting unlawful actsU.K.

10(1)This condition is met if the processing—U.K.

(a)is necessary for the purposes of the prevention or detection of an unlawful act,

(b)must be carried out without the consent of the data subject so as not to prejudice those purposes, and

(c)is necessary for reasons of substantial public interest.

(2)If the processing consists of the disclosure of personal data to a competent authority, or is carried out in preparation for such disclosure, the condition in sub-paragraph (1) is met even if, when the processing is carried out, the controller does not have an appropriate policy document in place (see paragraph 5 of this Schedule).

(3)In this paragraph—

  • act” includes a failure to act;

  • competent authority” has the same meaning as in Part 3 of this Act (see section 30).

Back to top

Options/Help