SCHEDULES

SCHEDULE 3 Conditions relevant for purposes of the first principle: processing of sensitive personal data

F17A

1

The processing—

a

is either—

i

the disclosure of sensitive personal data by a person as a member of an anti-fraud organisation or otherwise in accordance with any arrangements made by such an organisation; or

ii

any other processing by that person or another person of sensitive personal data so disclosed; and

b

is necessary for the purposes of preventing fraud or a particular kind of fraud.

2

In this paragraph “an anti-fraud organisation” means any unincorporated association, body corporate or other person which enables or facilitates any sharing of information to prevent fraud or a particular kind of fraud or which has any of these functions as its purpose or one of its purposes.