Data Protection Act covers specific sensitive information: