1. Paragraphs 2 and 3 set out the conditions specified for the disclosure of protected information by the registrar to a specified public authority.
2. The specified public authority has delivered to the registrar a statement that it intends to use the protected information only for the purpose of facilitating the carrying out by that specified public authority of a public function (“the permitted purpose”).
3. Subject to paragraph 4, the specified public authority (“the authority”) has delivered to the registrar a statement that it will, where it supplies a copy of the protected information to a processor for the purpose of processing the information for use in respect of the permitted purpose—
(a)ensure that the processor is one who carries on business in the European Economic Area;
(b)require that the information is not transmitted outside the European Economic Area by the processor; and
(c)require that the processor does not disclose the information except to the authority or an employee of the authority.
4. Paragraph 3 does not apply where the specified public authority is the Secret Intelligence Service, Security Service or Government Communications Headquarters.