The Data Protection (Crown Appointments) Order 2000
The Data Protection Act 1998 imposes certain obligations on data controllers to give data subjects information about the processing of their personal data and access to those personal data. By virtue of section 27(2) of that Act, the provisions imposing these obligations are referred to as the “subject information provisions”.