The processing of information in this area will be governed by data protection law, including the Data Protection Act 1998 when commenced. Such processing must be fair and lawful, and comply with the other data protection principles such as the right of individuals to see their own records.
Commentary Schedule 12Part II Data Protection