The Data Protection (Processing of Sensitive Personal Data) Order 2009

JurisdictionUK Non-devolved
CitationSI 2009/1811

2009 No. 1811

Data Protection

The Data Protection (Processing of Sensitive Personal Data) Order 2009

Made 7th July 2009

Coming into force in accordance with article 1(1)

The Secretary of State, in exercise of the powers conferred by section 67(2) of and paragraph 10 of Schedule 3 to the Data Protection Act 19981, makes the following Order;

In accordance with section 67(3) of the Data Protection Act 1998, the Secretary of State has consulted the Information Commissioner;

In accordance with section 67(4) of the Data Protection Act 1998, a draft of this instrument was laid before Parliament and approved by a resolution of each House of Parliament;

S-1 Citation, commencement and interpretation

Citation, commencement and interpretation

1.—(1) This Order may be cited as the Data Protection (Processing of Sensitive Personal Data) Order 2009 and shall come into force on the day after the day on which it is made.

(2) In this Order “prison” includes young offender institutions, remand centres and secure training centres and “prisoner” includes a person detained in a young offender institution, remand centre or secure training centre.

S-2 Condition relevant for purpose of the First Principle: processing of sensitive personal data

Condition relevant for purpose of the First Principle: processing of sensitive personal data

2.—(1) For the purposes of paragraph 10 of Schedule 3 to the Data Protection Act 1998, the circumstance specified in paragraph (2) is a circumstance in which sensitive personal data may be processed.

(2) The processing of information about a prisoner, including information relating to the prisoner’s release from prison, for the purpose of informing a Member of Parliament about the prisoner and arrangements for the prisoner’s release.

Claire M Ward

Parliamentary Under-Secretary of State

Ministry of Justice

7th July 2009

EXPLANATORY NOTE

(This note is not part of the Order)

“Sensitive personal data” is defined in section 2(g) and (h) of the Data Protection Act 1998 to include information as to the commission or alleged commission by a person of any offence, or any proceedings for any offence committed or alleged to have been committed by that person, the disposal of such proceedings or the sentence of any court in such proceedings.

The first data protection principle, set out in paragraph 1 of Schedule 1 to the Act, prohibits the processing of “sensitive personal data” unless...

To continue reading

Request your trial

VLEX uses login cookies to provide you with a better browsing experience. If you click on 'Accept' or continue browsing this site we consider that you accept our cookie policy. ACCEPT