s 13Z3 Permitted disclosures of information
(1) NHS England may disclose information obtained by it in the exercise of its functions if— (a) the information has previously been lawfully disclosed to the public, (b) the disclosure is made under or pursuant to regulations under section 113 or 114 of the Health and Social Care (Community Health and Standards) Act 2003 (complaints about health care or social services), (c) the disclosure is made in accordance with any enactment or court order, (d) the disclosure is necessary or expedient for the purposes of protecting the welfare of any individual, (e) the disclosure is made to any person in circumstances where it is necessary or expedient for the person to have the information for the purpose of exercising functions of that person under any enactment, (f) the disclosure is made for the purpose of facilitating the exercise of any of NHS England’s functions, (g) the disclosure is made in connection with the investigation of a criminal offence (whether or not in the United Kingdom), or (h) the disclosure is made for the purpose of criminal proceedings (whether or not in the United Kingdom). (2) Paragraphs (a) to (c) and (h) of subsection (1) have effect notwithstanding any rule of common law which would otherwise prohibit or restrict the disclosure.