http://www.legislation.gov.uk/uksi/2012/1978/contents/made

The Data Protection (Processing of Sensitive Personal Data) Order 2012

Privacy and data protection

Information

en

King's Printer of Acts of Parliament

2014-11-13

DATA PROTECTION

The Data Protection Act 1998 (c. 29) (“the Act”) regulates, amongst other things, the processing of “sensitive personal data”, as defined in section 2. The first data protection principle, set out in paragraph 1 of Schedule 1 to the Act, prohibits the processing of “sensitive personal data” unless one of the conditions in Schedule 3 to the Act is met. The condition in paragraph 10 of that Schedule is that the personal data are processed in circumstances specified in an order made by the Secretary of State. This Order specifies certain circumstances for the purposes of that paragraph.