Crossheading General obligationsFrom legislation.gov.ukDetailsContentsSection 102 General obligations of the controllerSection 103 Data protection by designSection 104 Joint controllersSection 105 ProcessorsSection 106 Processing under the authority of the controller or processor