Data Protection Act 1998

10The data controller must take reasonable steps to ensure the reliability of any employees of his who have access to the personal data.