Regulations 23 and 24.

5. Paragraphs 6 to 10 set out the conditions specified for the disclosure of protected information by the registrar to a credit reference agency.

6.

(1) The credit reference agency -

(a) is carrying on in the United Kingdom a business comprising the furnishing of information relevant to the financial standing of individuals, being information collected by the agency for that purpose;

(b) maintains appropriate procedures -

(i) to ensure that an independent person can investigate and audit the measures maintained by the agency for the purposes of ensuring the security of any protected information disclosed to that agency; and

(ii) for the purposes of ensuring that it complies with its obligations under the data protection legislation (as defined in section 3 of the Data Protection Act 2018 [2018 c. 12]);

(c) has not been found guilty of an offence under -