Regulations 22(2), 23(1) and 34(3)
6. The credit reference agency -
(a) is carrying on in the United Kingdom a business comprising the furnishing of information relevant to the financial standing of individuals, being information collected by the agency for that purpose;
(b) maintains appropriate procedures -
(i) to ensure that an independent person can investigate and audit the measures maintained by the agency for the purposes of ensuring the security of any information within section 790ZF(2) of the Act disclosed to that agency; and
(ii) for the purposes of ensuring that it complies with its obligations under the data protection legislation (as defined in section 3 of the Data Protection Act 2018);
(c) has not been found guilty of an offence under -
(i) section 1112 (false statements: basic offence) or 1112A (false statements: aggravated offence) of the Act;
(ii) section 2 of the Fraud Act 2006 [2006 c.35.] (fraud by false representation);
(iii) section 47 of the Data Protection Act
…