Exemptions
There are a number of exemptions within data protection legislation which effectively allow personal data to be withheld. To consider and apply an exemption will be dependent on the purpose for which the personal data is being processed, and should be undertaken on a case by case basis.
Further information:
There is more detailed guidance on exemptions available from the Information Commissioner's Office.