Nothing in this Act authorises a disclosure which contravenes F2the data protection legislation .

In this section, “the data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).