Nothing in section 21, 23 or 24 authorises or requires a disclosure of information which, although made in accordance with that section, would contravene the data protection legislation.

In this section “the data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).