An individual, public sector agency, or organisation that is authorised to access data under section 48 (and, in the case of a public sector agency or an organisation, each individual within the agency or organisation who has completed a certificate of confidentiality under section 42) must—
(a)
access and use the data only for the research for which access is authorised under section 48(1); and
(b)
comply with any conditions imposed by the Statistician under section 48(2); and
(c)
take all reasonable steps to ensure that any data published or otherwise disclosed is in a form that could not reasonably be expected to identify any individual or organisation; and
(c)
take all reasonable steps to ensure that they do not publish or otherwise disclose data in a form that could reasonably be expected to identify any individual or organisation; and
(d)
publish or otherwise disclose the results of their research and their methodologies.