3(1)A code about the exercise of functions conferred by virtue of Part 3 must contain provision about communications data held by public authorities by virtue of that Part.
(2)Such provision must, in particular, include provision about—
(a)why, how and where the data is held,
(b)who may access the data on behalf of the authority,
(c)to whom, and under what conditions, the data may be disclosed,
(d)the processing of the data for purposes otherwise than in connection with the purposes for which it was obtained or retained,
(e)the processing of the data together with other data,
(f)the processes for determining how long the data should be held and for the destruction of the data.