{
  "url": "https://openlegislation.uk/serious-crime-act-2007/section-72",
  "json_url": "https://openlegislation.uk/serious-crime-act-2007/section-72.json",
  "legislation": "ukpga/2007/27",
  "legislation_title": "Serious Crime Act 2007",
  "legislation_url": "https://openlegislation.uk/serious-crime-act-2007",
  "path": "section/72",
  "kind": "section",
  "number": "72",
  "heading": "Data protection rules",
  "text": "In Schedule 3 to the Data Protection Act 1998 (c. 29) (conditions for processing sensitive personal data), after paragraph 7, insert—\n“\n7A (1) The processing—\n(a) is either—\n(i) the disclosure of sensitive personal data by a person as a member of an anti-fraud organisation or otherwise in accordance with any arrangements made by such an organisation; or\n(ii) any other processing by that person or another person of sensitive personal data so disclosed; and\n(b) is necessary for the purposes of preventing fraud or a particular kind of fraud.\n(2) In this paragraph “an anti-fraud organisation” means any unincorporated association, body corporate or other person which enables or facilitates any sharing of information to prevent fraud or a particular kind of fraud or which has any of these functions as its purpose or one of its purposes.”",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "I",
      "label": "I1",
      "text": "S. 72 in force at 1.10.2008 by S.I. 2008/2504, art. 2(e)"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/ukpga/2007/27/section/72",
    "retrieved_at": "2026-10-29T09:12:31.404406+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}