Data Protection Act 1998

31 Regulatory activity

(1) Personal data processed for the purposes of discharging functions to which this subsection applies are exempt from the subject information provisions in any case to the extent to which the application of those provisions to the data would be likely to prejudice the proper discharge of those functions.

(2) Subsection (1) applies to any relevant function which is designed—

(a) for protecting members of the public against—

(i) financial loss due to dishonesty, malpractice or other seriously improper conduct by, or the unfitness or incompetence of, persons concerned in the provision of banking, insurance, investment or other financial services or in the management of bodies corporate,

(ii) financial loss due to the conduct of discharged or undischarged bankrupts, or

(iii) dishonesty, malpractice or other seriously improper conduct by, or the unfitness or incompetence of, persons authorised to carry on any profession or other activity,

(b) for protecting charities against misconduct or mismanagement (whether by trustees or other persons) in their administration,

(c) for protecting the property of charities from loss or misapplication,

(d) for the recovery of the property of charities,

(e) for securing the health, safety and welfare of persons at work, or

(f) for protecting persons other than persons at work against risk to health or safety arising out of or in connection with the actions of persons at work.

(3) In subsection (2) “relevant function” means—

(a) any function conferred on any person by or under any enactment,

(b) any function of the Crown, a Minister of the Crown or a government department, or

(c) any other function which is of a public nature and is exercised in the public interest.

(4) Personal data processed for the purpose of discharging any function which—

(a) is conferred by or under any enactment on—

(i) the Parliamentary Commissioner for Administration,

(ii) the Commission for Local Administration in England, the Commission for Local Administration in Wales or the Commissioner for Local Administration in Scotland,

(iii) the Health Service Commissioner for England, the Health Service Commissioner for Wales or the Health Service Commissioner for Scotland,

(iv) the Welsh Administration Ombudsman,

(v) the Assembly Ombudsman for Northern Ireland, or

(vi) the Northern Ireland Commissioner for Complaints, and

(b) is designed for protecting members of the public against—

(i) maladministration by public bodies,

(ii) failures in services provided by public bodies, or

(iii) a failure of a public body to provide a service which it was a function of the body to provide,

are exempt from the subject information provisions in any case to the extent to which the application of those provisions to the data would be likely to prejudice the proper discharge of that function.

(5) Personal data processed for the purpose of discharging any function which—

(a) is conferred by or under any enactment on the Director General of Fair Trading, and

(b) is designed—

(i) for protecting members of the public against conduct which may adversely affect their interests by persons carrying on a business,

(ii) for regulating agreements or conduct which have as their object or effect the prevention, restriction or distortion of competition in connection with any commercial activity, or

(iii) for regulating conduct on the part of one or more undertakings which amounts to the abuse of a dominant position in a market,

are exempt from the subject information provisions in any case to the extent to which the application of those provisions to the data would be likely to prejudice the proper discharge of that function.