# Data Protection Act 2018, Paragraph 8


(1) This condition is met if the processing—
(a) is necessary for the purposes of preventing fraud or a particular kind of fraud, and
(b) consists of—
(i) the disclosure of personal data by a competent authority as a member of an anti-fraud organisation,
(ii) the disclosure of personal data by a competent authority in accordance with arrangements made by an anti-fraud organisation,
(iia) the processing of personal data carried out in preparation for disclosure described in sub-paragraph (i) or (ii), or
(iii) the processing of personal data disclosed as described in sub-paragraph (i) or (ii).
(2) In this paragraph, “anti-fraud organisation” has the same meaning as in section 68 of the Serious Crime Act 2007.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/8/paragraph/8 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-8/paragraph-8
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.