s 70ZL General limitations on access agreements etc
(1) Nothing in this Chapter requires or authorises any of the following (each, a “prohibited activity”)— (a) physical entry by any person into a dwelling; (b) a disclosure of personal data without the consent of the data subject; (c) a disclosure of information that would contravene the data protection legislation (but, in determining whether a disclosure would do so, the provisions of this Chapter are to be taken into account). (2) Accordingly— (a) a term of an access agreement entered into under section 70ZD that requires or authorises a prohibited activity is of no effect for the purposes of this Chapter; (b) the Central Arbitration Committee may not specify as a term of an access agreement under section 70ZE any term that would require or authorise a prohibited activity; (c) the Central Arbitration Committee may not exercise any function under sections 70ZH to 70ZK so as to require or authorise a prohibited activity. (3) In this section— (a) “ consent ” has the same meaning as in the UK GDPR (see Article 4(11) of the UK GDPR); (b) “ personal data ”, “ data subject ”, “ the data protection legislation ” and “ the UK GDPR ” have the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).