The Data Protection (Regulation of Financial Services etc.) (Subject Access Exemption) (Amendment) Order 1997
Section 30 of the Data Protection Act 1984 provides that personal data held for the purpose of discharging statutory functions which are designated by the Secretary of State by an order made under that section shall be exempt from the subject access provisions of the Act in any case in which the application of those provisions to the data would be likely to prejudice the proper discharge of those functions. The functions that may be designated are those conferred by or under any enactment appearing to the Secretary of State to be designed for protecting members of the public against financial loss due to dishonesty, incompetence or malpractice by persons concerned in the provision of banking, insurance, investment or other financial services or in the management of companies or to the conduct of discharged or undischarged bankrupts.