8(1)A disclosure of information pursuant to a requirement under this Schedule does not breach—
(a)any obligation of confidence owed by the person making the disclosure, or
(b)any other restriction on the disclosure of information (however imposed).
(2)A duty imposed by virtue of this Schedule does not require a person to disclose information if to do so would contravene the data protection legislation (but in determining whether the disclosure would do so, the duty imposed by virtue of this Schedule is to be taken into account).
(3)In sub-paragraph (2) “the data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3(9) of that Act).