Section 50: Confidentiality of personal information, Digital Economy Act 2017

Personal information received by a person ("P") under section 48 may not be disclosed—

by P, or

by any other person who has received it directly or indirectly from P.

Subsection (1) does not apply to a disclosure—

which is required or permitted by any enactment (including section 48),

which is required by an EU obligation,

which is made in pursuance of an order of the court,

of information which has already lawfully been made available to the public,

which is made for the prevention or detection of crime or the prevention of anti-social behaviour,

which is made for the purposes of a criminal investigation,

which is made for the purposes of legal proceedings (whether civil or criminal),

which is a protected disclosure for any of the purposes of the Employment Rights Act 1996 or the Employment Rights (Northern Ireland) Order 1996 (SI 1996/1919 (NI 16)),

consisting of the publication of information for the purposes of journalism, where the publication of the information is in the public interest,

which is made with the consent of the person to whom it relates,

which is made for the purposes of safeguarding vulnerable adults or children, or

which is made for the purposes of protecting national security.

In subsection (2)(e) "anti-social behaviour" means conduct that—

is likely to cause harassment, alarm or distress to any person, or

is capable of causing nuisance or annoyance to a person in relation to that person's occupation of residential premises.

A person commits an offence if—

the person discloses personal information in contravention of subsection (1), and

at the time that the person makes the disclosure, the person knows that the disclosure contravenes that subsection or is reckless as to whether the disclosure does so.

A person who is guilty of an offence under subsection (4) is liable on conviction on indictment to imprisonment for a term not exceeding two years, to a fine or to both.

A person who is guilty of an offence under subsection (4) is liable on summary conviction—

in England and Wales, to imprisonment for a term not exceeding the general limit in a magistrates' court, to a fine or to both;

in Scotland, to imprisonment for a term not exceeding 12 months, to a fine not exceeding the statutory maximum or to both;

in Northern Ireland, to imprisonment for a term not exceeding 6 months, to a fine not exceeding the statutory maximum or to both.

In the application of subsection (6)(a) to an offence committed before 2 May 2022 the reference to the general limit in a magistrates' court is to be read as a reference to 6 months.

This section does not apply to personal information disclosed under section 48 by the Revenue and Customs.

Section 50: Confidentiality of personal information

Discussed in

About this text