CHAPTER 4 Controller and processorFrom legislation.gov.ukDetailsContentsCrossheading Overview and scopeCrossheading General obligationsCrossheading Obligations relating to securityCrossheading Obligations relating to personal data breachesCrossheading Data protection officersCrossheading Codes of conduct