These Regulations do not authorise or require - (a) a disclosure in contravention of the data protection legislation; or (b) a disclosure which is prohibited by any of Parts 1 to 3 or 5 to 7 of the Investigatory Powers Act 2016 [2016 c.25.].