Regulation 29 Protection of information
(1)
A person who, by virtue of these Regulations, has obtained information which relates to the affairs of any individual or to any particular business must not use or disclose that information except as provided in paragraph (2).
(2)
Paragraph (1) does not prohibit the use or disclosure of information which is—
(a)
with the consent of the person to whom the information relates;
(b)
required or permitted by or under these Regulations or any other enactment;
(c)
which is already publicly available (other than by reason of a breach of this regulation);
(d)
in accordance with an order of a court.