(1) Nothing in this Act or the 2008 Act requires or authorises a disclosure of information that would contravene the data protection legislation (but in determining whether a disclosure would do so, duties imposed and powers conferred by this Act or the 2008 Act are to be taken into account).

(2) Otherwise, no obligation as to secrecy or other restriction on disclosure (however imposed) prevents a participating institution from giving an authorised reclaim fund any information needed by the reclaim fund to enable it to plan for or deal with repayment claims.

(3) In this section -

"the data protection legislation" has the same meaning as in the Data Protection Act 2018 (see section 3(9) of that Act);

"participating institution" means an institution with whom the authorised reclaim fund has made arrangements as mentioned in section 23;