# Data Protection Act 2018, Section 102: General obligations of the controller


Each controller must implement appropriate measures—
(a) to ensure, and
(b) to be able to demonstrate, in particular to the Commission,
that the processing of personal data complies with the requirements of this Part.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/section/102 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/section-102
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.