http://www.legislation.gov.uk/id/ukpga/2018/12/schedule/1/enacted

SCHEDULES

SCHEDULE 1Special categories of personal data and criminal convictions etc data

PART 4Appropriate policy document and additional safeguards

38Application of this Part of this Schedule

This Part of this Schedule makes provision about the processing of personal data carried out in reliance on a condition in Part 1, 2 or 3 of this Schedule which requires the controller to have an appropriate policy document in place when the processing is carried out.