http://www.legislation.gov.uk/id/ukpga/1998/29/schedule/1/enacted

SCHEDULES

SCHEDULE 1The data protection principles

Part IThe principles

1

Personal data shall be processed fairly and lawfully and, in particular, shall not be processed unless—

a

at least one of the conditions in Schedule 2 is met, and

b

in the case of sensitive personal data, at least one of the conditions in Schedule 3 is also met.