The Data Protection (Crown Appointments) Order 2000

2.  There shall be exempted from the subject information provisions of the Data Protection Act 1998 (as defined by section 27(2) of that Act) personal data processed for the purposes of assessing any person’s suitability for any of the offices listed in the Schedule to this Order.