Nothing in this Act authorises a disclosure which contravenes the Data Protection Act 1998 (c. 29).