Data Protection Act 1988 (Section 2A) Regulations 2016.

Linked as: