Article 28 Data protection
Nothing in this Regulation is to be taken as authorising a disclosure of personal data in contravention of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, or of the Data Protection Act 2018 [2018 c.12.].