13 Obligations of credit reference agencies

13  Obligations of credit reference agencies

(1)     This section applies where a controller is a credit reference agency (within the meaning of section 145(8) of the Consumer Credit Act 1974).

(2)     The controller's obligations under Article 15(1) to (3) of the [UK GDPR] (confirmation of processing, access to data and safeguards for third country transfers) are taken to apply only to personal data relating to the data subject's financial standing, unless the data subject has indicated a contrary intention.

(3)     Where the controller discloses personal data in pursuance of Article 15(1) to (3) of the [UK GDPR], the disclosure must be

Popular documents