There's some exemptions around law enforcement matters:

https://ico.org.uk/for-organisations/guide-to-the-general-da...

For example:

"the prevention, investigation, detection or prosecution of criminal offences;"