{
  "url": "https://openlegislation.uk/data-protection-act-2018/schedule-1/paragraph-5",
  "json_url": "https://openlegislation.uk/data-protection-act-2018/schedule-1/paragraph-5.json",
  "legislation": "ukpga/2018/12",
  "legislation_title": "Data Protection Act 2018",
  "legislation_url": "https://openlegislation.uk/data-protection-act-2018",
  "path": "schedule/1/paragraph/5",
  "kind": "paragraph",
  "number": "5",
  "heading": null,
  "text": "(1) Except as otherwise provided, a condition in this Part of this Schedule is met only if, when the processing is carried out, the controller has an appropriate policy document in place (see paragraph 39 in Part 4 of this Schedule).\n(2) See also the additional safeguards in Part 4 of this Schedule.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "I",
      "label": "I1",
      "text": "Sch. 1 para. 5 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/1/paragraph/5",
    "retrieved_at": "2026-10-29T09:04:55.804064+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}