Regulations 2 and 3

5. Paragraphs 6 to 10 set out the conditions specified for the disclosure of protected information by the registrar to a credit reference agency.

6.

(1) The credit reference agency -

(a) is carrying on in the United Kingdom a business comprising the furnishing of information relevant to the financial standing of individuals, being information collected by the agency for that purpose;

(b) maintains appropriate procedures -

(i) to ensure that an independent person can investigate and audit the measures maintained by the agency for the purposes of ensuring the security of any protected information disclosed to that agency; and

(ii) for the purposes of ensuring that it complies with its obligations under the data protection legislation (as defined in section 3 of the Data Protection Act 2018);

(c) has not been found guilty of an offence under -

(i)section 1112 (false statements: basic offence) or section 1112A (false statements: aggravated offence) of the Act or section 2 of the Fraud Act 2006 (fraud by false representation);