It is an offence for an employer, prospective employer or client, or a provider of goods, facilities or services to the public, to require (or to ask in circumstances where the person would reasonably feel obliged) a person to provide or give access to a relevant record obtained through a data subject access right, namely health records, records of convictions and cautions held by police and other bodies, and records relating to specified statutory functions, in connection with recruitment, continued employment, a contract for services or as a condition of providing goods, facilities or services, unless required or authorised by law or justified in the public interest; crime prevention is not a public interest justification given the criminal records disclosure schemes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.