# The Criminal Justice and Data Protection (Protocol No. 36) Regulations 2014, Regulation 46: Confidentiality of processing


(1) A person who has access to personal data in connection with activities referred to in regulation 29 may process that data only if that person is a member of, or acts on instructions of, a UK competent authority, unless he is required to do so by an enactment or rule of law.
(2) A person working for a UK competent authority may only process such personal data in accordance with this Part.

---
Source: https://www.legislation.gov.uk/ukdsi/2014/9780111122723/regulation/46 (the official version)
Page: https://openlegislation.uk/draft-criminal-justice-and-data-protection-protocol-no-36-regulations-2014/regulation-46
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.