Data Protection Act 1998

10The personal data are processed in circumstances specified in an order made by the Secretary of State for the purposes of this paragraph.