{
  "url": "https://openlegislation.uk/counter-terrorism-act-2008/section-20",
  "json_url": "https://openlegislation.uk/counter-terrorism-act-2008/section-20.json",
  "legislation": "ukpga/2008/28",
  "legislation_title": "Counter-Terrorism Act 2008",
  "legislation_url": "https://openlegislation.uk/counter-terrorism-act-2008",
  "path": "section/20",
  "kind": "section",
  "number": "20",
  "heading": "Disclosure and the intelligence services: supplementary provisions",
  "text": "(1) The provisions of section 19 (disclosure and use of information) do not affect the duties with respect to the obtaining or disclosure of information imposed—\n(a) on the Director-General of the Security Service, by section 2(2) of the Security Service Act 1989;\n(b) on the Chief of the Intelligence Service, by section 2(2) of the Intelligence Services Act 1994;\n(c) on the Director of GCHQ, by section 4(2) of that Act.\n(2) Nothing in that section authorises a disclosure that—\n(a) contravenes the data protection legislation, or\n(b) is prohibited by any of Parts 1 to 7 or Chapter 1 of Part 9 of the Investigatory Powers Act 2016.\n(3) The provisions of that section are without prejudice to any rule of law authorising the obtaining, use or disclosure of information by any of the intelligence services.\n(4) Schedule 1 contains amendments consequential on that section.\n(5) In this section, “the data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Words in s. 20(2)(a) substituted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 154(2) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)"
    },
    {
      "type": "F",
      "label": "F2",
      "text": "Words in s. 20(2)(b) substituted (27.6.2018) by Investigatory Powers Act 2016 (c. 25), s. 272(1), Sch. 10 para. 22 (with Sch. 9 paras. 7, 8, 10); S.I. 2018/652, reg. 12(g)(iii)"
    },
    {
      "type": "F",
      "label": "F3",
      "text": "S. 20(5) inserted (25.5.2018) by Data Protection Act 2018 (c. 12), s. 212(1), Sch. 19 para. 154(3) (with ss. 117, 209, 210); S.I. 2018/625, reg. 2(1)(g)"
    },
    {
      "type": "I",
      "label": "I1",
      "text": "S. 20 in force at 24.12.2008 by S.I. 2008/3296, art. 2"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/ukpga/2008/28/section/20",
    "retrieved_at": "2026-10-29T09:11:40.867015+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}