The Data Protection Act 1998, which is UK Parliament legislation, provides the general legal framework in relation to the processing of data held about living individuals. This includes information relating to a person’s criminal convictions, sentencing arising from convictions and charges that led to convictions.