SCHEDULES
SCHEDULE 3 Conditions relevant for purposes of the first principle: processing of sensitive personal data
I12
1
The processing is necessary for the purposes of exercising or performing any right or obligation which is conferred or imposed by law on the data controller in connection with employment.
2
The Secretary of State may by order—
a
exclude the application of sub-paragraph (1) in such cases as may be specified, or
b
provide that, in such cases as may be specified, the condition in sub-paragraph (1) is not to be regarded as satisfied unless such further conditions as may be specified in the order are also satisfied.