# The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014, Regulation 33: Processing of sensitive personal data


Sensitive personal data may be processed only if—
(a) necessary; and
(b) at least one of the conditions in Schedule 3 to the Act (conditions relevant for the processing of sensitive personal data), with the exception of the condition in paragraph 8 of that Schedule, is satisfied.

---
Source: https://www.legislation.gov.uk/ukdsi/2014/9780111122723/regulation/33 (the official version)
Page: https://openlegislation.uk/draft-criminal-justice-and-data-protection-protocol-no-36-regulations-2014/regulation-33
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.