A responsible party may, subject to section 27, not process personal information concerning—
| (a) | the religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health or sex life or biometric information of a data subject; or |
| (b) | the criminal behaviour of a data subject to the extent that such information relates to— |
| (i) | the alleged commission by a data subject of any offence; or |
| (ii) | any proceedings in respect of any offence allegedly committed by a data subject or the disposal of such proceedings. |
