An undertaking to comply with the first data protection principle has been signed by the Disclosure and Barring Service.