The Data Protection (Processing of Sensitive Personal Data) (Elected Representatives) Order 2002
The first data protection principle, set out in paragraph 1of Schedule 1 to the Data Protection Act 1998, prohibits the processing of sensitive personal data unless one of the conditions in Schedule 3 to the Act is met. The condition set out in paragraph 10 of that Schedule is that the personal data are processed in circumstances specified in an order made by the Lord Chancellor.