Data Protection Act 1998

6Personal data shall be processed in accordance with the rights of data subjects under this Act.