Data Protection Act 1998

Confidential references given by the data controller

1Personal data are exempt from section 7 if they consist of a reference given or to be given in confidence by the data controller for the purposes of—

(a)the education, training or employment, or prospective education, training or employment, of the data subject,

(b)the appointment, or prospective appointment, of the data subject to any office, or

(c)the provision, or prospective provision, by the data subject of any service.