{
  "url": "https://openlegislation.uk/draft-criminal-justice-and-data-protection-protocol-no-36-regulations-2014/regulation-33",
  "json_url": "https://openlegislation.uk/draft-criminal-justice-and-data-protection-protocol-no-36-regulations-2014/regulation-33.json",
  "legislation": "ukdsi/2014/9780111122723",
  "legislation_title": "The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014",
  "legislation_url": "https://openlegislation.uk/draft-criminal-justice-and-data-protection-protocol-no-36-regulations-2014",
  "path": "regulation/33",
  "kind": "regulation",
  "number": "33",
  "heading": "Processing of sensitive personal data",
  "text": "Sensitive personal data may be processed only if—\n(a) necessary; and\n(b) at least one of the conditions in Schedule 3 to the Act (conditions relevant for the processing of sensitive personal data), with the exception of the condition in paragraph 8 of that Schedule, is satisfied.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/ukdsi/2014/9780111122723/regulation/33",
    "retrieved_at": "2026-10-30T15:11:50.850438+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}