C.3 Data-protection context

Application: England and Wales, Scotland and Northern Ireland
Primary regime to confirm: UK GDPR and Data Protection Act 2018, together with any sector-specific provisions
Supervisory guidance: Information Commissioner’s Office

Application: Republic of Ireland
Primary regime to confirm: EU GDPR and Data Protection Act 2018, together with any sector-specific provisions
Supervisory guidance: Data Protection Commission

The controller, joint-controller or processor role shall be determined from the actual purposes and means of processing. Land referencing organisations are not invariably processors.