you should probably quote the relevant bit.
[Prohibitions] does not apply to a disclosure which:
a) is required or permitted by any enactment,
b) is required by a Community obligation,
c) is necessary for the purpose of enabling or assisting the Board to exercise any of its functions,
d) has already lawfully been made available to the public,
e) is made in pursuance of an order of a court,
f) is made for the purposes of a criminal investigation or criminal proceedings (whether or not in the United Kingdom),
g) is made, in the interests of national security, to an Intelligence Service,
h) is made with the consent of the person to whom it relates, or
i) is made to an approved researcher."
g) Has been repealed. We have left the 'Community' so b is out too. e & f are indeed in place, and dubious as heck, even if the only three things they'll get to know that HMRC and/or DWP might not already know are about your homes heating, travel to work method and how you consider your health to be. You'll note that they are individual, not group based (G excluded) which precludes the kind of trawling exercises and mass datagrabs that the americans carried out.