The Court of Appeal upholds the Information Commissioner’s position in the DSG case
Controllers are obliged to take appropriate technical and organisational security measures in respect of information which is personal data in their hands even if, in the hands of a third party, the information would not be regarded as personal data. By Nicola Cain of Handley Gill Limited
01 May 2026