(1)A regulatory body may provide information to another regulatory body or relevant authority in pursuance of an arrangement made under this Part to co-operate, jointly exercise functions or delegate functions.
(2)Information must not be provided under subsection (1) to a regulatory body or relevant authority if the person holding the information is prohibited from providing it by any enactment or other rule of law.
(3)In the case of information relating to an individual, the information may be provided to a regulatory body or relevant authority only if—
(a)the information is provided in a form which does not identify the individual, or
(b)the person holding the information obtains the individual's consent to provide it.
(4)For the purposes of subsection (3)(a), information is to be treated as being in a form which identifies an individual if the individual can be identified from a combination of—
(a)the information, and
(b)other information provided to a regulatory body or relevant authority by the same regulatory body.
(5)Information provided in pursuance of an arrangement under this Part must be used by the person to whom it is provided only for the purposes of co-operating, jointly exercising functions or exercising delegated functions in pursuance of the arrangement.
(6)This section does not affect the duty of the regulatory bodies to disclose information for the purposes of protecting the well-being of an individual.