General rules made by virtue of section 137FAA(1) may make provision about—
The provision made by virtue of subsection (1) may, in particular, require—
The facilities and services for which provision may be made by virtue of subsection (2)(b) may include facilities or services with functions relating to—
Rules made by virtue of subsection (2)(b) may impose requirements as regards a facility or service, including requirements about—
Rules made by virtue of subsection (2)(d) may, in particular, require specified authorised persons—
Except as provided by subsection (7), general rules made by virtue of section 137FAA(1) may provide for the processing of personal data in accordance with the rules not to be in breach of—
General rules made by virtue of section 137FAA(1) are not to be read as authorising or requiring such processing of personal data as would contravene the data protection legislation (but in determining whether particular processing of data would do so, take into account the power conferred or duty imposed by the provision of the rules in question).