Section 78 amends the provisions in the UK GDPR and DPA 2018 which set out the right of access to information and personal data across the United Kingdom’s data protection regime to clarify that controllers only have to carry out reasonable and proportionate searches for information and personal data requested. This codifies the principle currently set out in domestic case law.
	Subsection (5) stipulates that this amendment should be treated as having come into force on 1st January 2024.
Part 5: Data Protection and Privacy Data subject’s rights Section 78: Searches in response to data subjects’ requests