Digital Economy Act 2017

49 Further provisions about power in section 48

(1) Personal information disclosed under section 48 may only be used by the person to whom it is disclosed for the purposes for which it was disclosed, subject to subsection (2).

(2) Subsection (1) does not prevent the use of information by a person—

(a) if the information has already lawfully been made available to the public,

(b) if the person to whom the information relates consents to its use for another purpose,

(c) for the prevention or detection of crime or the prevention of anti-social behaviour,

(d) for the purposes of a criminal investigation,

(e) for the purposes of legal proceedings (whether civil or criminal),

(f) for the purposes of safeguarding vulnerable adults or children, or

(g) for the purposes of protecting national security.

(3) In subsection (2)(c) “anti-social behaviour” means conduct that—

(a) is likely to cause harassment, alarm or distress to any person, or

(b) is capable of causing nuisance or annoyance to a person in relation to that person’s occupation of residential premises.

(4) Subsection (2) does not apply to information disclosed to a person under section 48 by the Revenue and Customs; but such information may be used by that person for purposes other than those for which it was disclosed with the consent of the Commissioners for Her Majesty’s Revenue and Customs (which may be general or specific).

(5) For the purposes of this Chapter information is “personal information” if—

(a) it relates to and identifies a particular person (including a body corporate), but

(b) it is not information about the internal administrative arrangements of a specified person.

(6) For the purposes of subsection (5) information identifies a particular person if the identity of that person—

(a) is specified in the information,

(b) can be deduced from the information, or

(c) can be deduced from the information taken together with any other information.

(7) A disclosure under section 48 does not breach—

(a) any obligation of confidence owed by the person making the disclosure, or

(b) any other restriction on the disclosure of information (however imposed).

(8) But nothing in section 48 authorises the making of a disclosure which—

(a) contravenes the Data Protection Act 1998, or

(b) is prohibited by any of Parts 1 to 7 or Chapter 1 of Part 9 of the Investigatory Powers Act 2016.

(9) Until the repeal of Part 1 of the Regulation of Investigatory Powers Act 2000 by paragraphs 45 and 54 of Schedule 10 to the Investigatory Powers Act 2016 is fully in force, subsection (8)(b) has effect as if it included a reference to that Part.

(10) Section 48 does not limit the circumstances in which information may be disclosed apart from that section.