3(1)A duty or power to disclose information under this Part of this Schedule does not operate to require or authorise the disclosure of information which—
(a)would contravene the data protection legislation (but the duty or power is to be taken into account in determining whether the disclosure or use would contravene that legislation);
(b)is prohibited by any of Parts 1 to 7 or Chapter 1 of Part 9 of the Investigatory Powers Act 2016.
(2)In this paragraph “the data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).