Nobody discloses information about another person's affairs that they obtained while performing functions under the Act, except so far as needed to administer a provision of the Act properly, for the administration of justice, or when an entitled health and safety representative or committee asks for it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.