# Data Protection Act 2018, Section 105: Processors


(1) This section applies to the use by a controller of a processor to carry out processing of personal data on behalf of the controller.
(2) The controller may use only a processor who undertakes—
(a) to implement appropriate measures that are sufficient to secure that the processing complies with this Part;
(b) to provide to the controller such information as is necessary for demonstrating that the processing complies with this Part.
(3) If a processor determines, in breach of this Part, the purposes and means of processing, the processor is to be treated for the purposes of this Part as a controller in respect of that processing.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/section/105 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/section-105
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.