(1) Notwithstanding any other enactment, information disclosed under section 12(1) or 13(2) or (3) may be or include personal data (including special categories of personal data and Article 10 data) where necessary and proportionate for the performance of the function concerned.

(2) Notwithstanding any other enactment but subject to the taking of suitable and specific measures, the person to whom personal data (including special categories of personal data and Article 10 data) were disclosed under section 12(1) or 13(2) or (3) as read with subsection (1) may process such data for the purposes for which the disclosure was made to the person.

(3) Notwithstanding any other enactment but subject to the taking of suitable and specific measures, the Compensation Body may, in the performance of its functions in relation to the relevant purposes, process personal data (including special categories of personal data and Article 10 data) held by it or disclosed to it pursuant to a provision of this Act.