18Regulator’s power to require information
(1)The age-verification regulator may by notice require a relevant person to provide it with any information which it requires for the purpose of exercising, or deciding whether to exercise, any function under this Part.
(2)The power in subsection (1) may only be exercised to require a relevant person to provide information which the age-verification regulator believes the relevant person has.
(3)A “relevant person” is—
(a)an internet service provider, or
(b)any other person who the age-verification regulator believes to be involved, or to have been involved, in making pornographic material available on the internet on a commercial basis to persons in the United Kingdom.
(4)A notice under subsection (1) must specify—
(a)the form and manner in which the information must be provided; and
(b)the time at which, or period within which, the information must be provided.
(5)The power in subsection (1) is not exercisable in relation to information in respect of which a claim to legal professional privilege (or, in Scotland, confidentiality of communications) could be maintained in legal proceedings.