Nothing in section 125A or 125B authorises the making of a disclosure which contravenes the data protection legislation.

In this section, “the data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).