The Data Protection (Processing of Sensitive Personal Data) Order 2009
“Sensitive personal data” is defined in section 2(g) and (h) of the Data Protection Act 1998 to include information as to the commission or alleged commission by a person of any offence, or any proceedings for any offence committed or alleged to have been committed by that person, the disposal of such proceedings or the sentence of any court in such proceedings.