UK Statutory Instrument
2000
United Kingdom
Data Protection (Processing of Sensitive Personal Data) Order 2000
At a glance
Enforced by
What this Act requires
Sections that create concrete duties on businesses or carry penalties. Procedural and definitional sections are folded into the “Browse other sections” expander at the bottom of each group. Click any section title to read the source text on legislation.gov.uk.
Browse 12 other sections — procedural / definitional / commencement
The processing— (a) is in the substantial public interest;
(1) The disclosure of personal data— (a) is in the...
The processing— (a) is in the substantial public interest;
(1) The processing— (a) is necessary for the purpose of—...
The processing— (a) is of sensitive personal data in relation...
(1) Subject to the provisions of sub-paragraph (2), the processing—...
(1) Subject to the provisions of sub-paragraph (2), the processing—...
The processing— (a) is in the substantial public interest;
The processing is necessary for the exercise of any functions...
(1) This Order may be cited as the Data Protection...
For the purposes of paragraph 10 of Schedule 3 to...
Enforcement and responsible bodies
The regulators that administer or enforce this legislation.
Information Commissioner's Office
Data protection, freedom of information, privacy and electronic communications regulation. Enforces UK GDPR and Data Protection Act 2018. Issues fines for breaches. …
Connected legislation
parent Act
These instruments amend, apply, or refer to this Act. They may not all create direct business obligations.
Made under
DPA 1998 1998 Primary Act
Explore more
Browse legislation
Find other UK business legislation with related guidance.
Regulators
Learn more about the bodies that enforce this legislation.