Nothing in sections 14 to 17 authorises the making of a disclosure which—
contravenes the data protection legislation, or
is prohibited by any of Parts 1 to 7 or Chapter 1 of Part 9 of the Investigatory Powers Act 2016.
Information whose disclosure is prohibited by section 15(1) or (2) or 17(1) is exempt information by virtue of section 44(1)(a) of the Freedom of Information Act 2000 (c. 36).
Sections 15(6), 16 and 17(2) and (4) are to be disregarded in determining for the purposes of subsection (2) whether the disclosure of personal customs information is prohibited by section 15(1) or (2) or 17(1).
In section 23 of the Commissioners for Revenue and Customs Act 2005 (c. 11) (freedom of information), after subsection (1) insert—
In this section, "the data protection legislation" has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).