The Data Protection (Miscellaneous Subject Access Exemptions) Order 2000

2.  Personal data consisting of information the disclosure of which is prohibited or restricted by the enactments and instruments listed in the Schedule to this Order are exempt from section 7 of the Data Protection Act 1998.