Part 7: Supplementary and final provision Section 209: Application to the Crown
The GDPR does not contain any provision to exempt the Crown from its requirements. Likewise, section 63 of the 1998 Act bound the Crown. This section makes similar, and related, provision. For example, where crown bodies enter into controller-processor relationships with each other, subsection (3) provides that that arrangement may be governed by a Memorandum of Understanding rather than a contract (see Article 28(3) of the GDPR).