Nothing in this Chapter requires or authorises any of the following (each, a "prohibited activity")—
physical entry by any person into a dwelling;
a disclosure of personal data without the consent of the data subject;
a disclosure of information that would contravene the data protection legislation (but, in determining whether a disclosure would do so, the provisions of this Chapter are to be taken into account).
Accordingly—
a term of an access agreement entered into under section 70ZD that requires or authorises a prohibited activity is of no effect for the purposes of this Chapter;
the Central Arbitration Committee may not specify as a term of an access agreement under section 70ZE any term that would require or authorise a prohibited activity;
the Central Arbitration Committee may not exercise any function under sections 70ZH to 70ZK so as to require or authorise a prohibited activity.
In this section—
"consent" has the same meaning as in the UK GDPR (see Article 4(11) of the UK GDPR);
"personal data", "data subject", "the data protection legislation" and "the UK GDPR" have the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).