Subsection (1) does not prohibit the disclosure of information if—
Subsection (2) does not authorise the making of a disclosure which contravenes the data protection legislation.
A person who discloses information in contravention of this section commits an offence and is liable on summary conviction to a fine not exceeding level 5 on the standard scale.
Proceedings in England and Wales for an offence under this section may be instituted only with the consent of the Director of Public Prosecutions.
For the purposes of this section information held by—
is information that is held by ACAS in connection with the provision of a service by ACAS.
In this section, "the data protection legislation" has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).