72.Section 27 applies where a person (“the recipient”) receives information in accordance with Part 4 of the Act which has been provided in breach of a duty of confidentiality and where the recipient has been made known of this breach. The recipient is not then to provide that information to anyone else (a third party), unless they are permitted or required to provide that same information to the third party by virtue of any enactment (including Part 4) or any rule of law.