Subsection (1) of section 20 ensures that, except as provided for by subsection (2) in relation to data protection, Part 1 regulations may provide for the processing of information not to be in breach an obligation of confidence (paragraph (a)) or any other restriction on the processing of information (paragraph (b)).
	Subsection (2) provides that Part 1 regulations are not to be read as authorising or requiring processing of personal data that would contravene the data protection legislation. However, in determining whether processing of data would do so, account may be taken of the requirements of those regulations. Subsection (3) defines "the data protection legislation" and "personal data" by reference to the DPA 2018.
	Subsections (1) and (2) reflect the provisions relating to pensions dashboards inserted by the Pension Schemes Act 2021 at section 238B(6) and (7) of the Pensions Act 2004.
Part 1: Access to Customer Data and Business Data Supplementary Section 20: Restrictions on processing and data protection