66.—(1) Nothing in these Regulations authorises or requires a disclosure of information if the disclosure would contravene the data protection legislation, as defined in section 3 of the Data Protection Act 2018(1).
(2) In determining whether a disclosure would contravene that legislation, the powers conferred and duties imposed by these Regulations are to be taken into account.
2018 c. 12; relevant provisions of section 3 were amended by S.I. 2019/419.