1.The supervisory body may give information and assistance to, and otherwise co-operate with, a public authority in the EU if the supervisory body considers that to do so would be in the interests of effective regulation or supervision of trust services (whether inside or outside the United Kingdom).

2. Nothing in paragraph 1 authorises the processing of personal data other than in accordance with the data protection legislation.

 In this paragraph, "processing", "personal data" and "the data protection legislation" have the meanings given by section 3 of the Data Protection Act 2018 [2018 c. 12.].