Data Protection Act 2018
Processing of special categories of personal data for purposes of administration of justice and performance of functions
49. Subject to suitable and specific measures being taken to safeguard the fundamental rights and freedoms of data subjects, the processing of special categories of personal data shall be lawful where the processing respects the essence of the right to data protection and is necessary and proportionate for—
(a) the administration of justice, or
(b) the performance of a function conferred on a person by or under an enactment or by the Constitution.