Data Protection Act 1998

10U.K.The data controller must take reasonable steps to ensure the reliability of any employees of his who have access to the personal data.