170 Unlawful obtaining etc of personal data
170 Unlawful obtaining etc of personal data

(1)     It is an offence for a person knowingly or recklessly—

(a)     to obtain or disclose personal data without the consent of the controller,

(b)     to procure the disclosure of personal data to another person without the consent of the controller, or

(c)     after obtaining personal data, to retain it without the consent of the person who was the controller in relation to the personal data when it was obtained.

(2)     It is a defence for a person charged with an offence under subsection (1) to prove that the obtaining, disclosing, procuring or retaining—

(a)     was necessary for the purposes of preventi

Popular documents