Re disclosure and asking for a GRC, here is the relevant section (22) of the GRA:
https://www.legislation.gov.uk/ukpga/2004/7/section/22
Prohibition on disclosure of information
(1)It is an offence for a person who has acquired protected information in an official capacity to disclose the information to any other person.
So those are very specific circumstances. To whit:
'A person acquires protected information in an official capacity if the person acquires it—
(a)in connection with the person’s functions as a member of the civil service, a constable or the holder of any other public office or in connection with the functions of a local or public authority or of a voluntary organisation,
(b)as an employer, or prospective employer, of the person to whom the information relates or as a person employed by such an employer or prospective employer, or
(c)in the course of, or otherwise in connection with, the conduct of business or the supply of professional services.'
And probably worth noting:
'Not a single prosecution has yet been brought for breach of Section 22.'
publications.parliament.uk/pa/cm201516/cmselect/cmwomeq/390/39006.htm#:~:text=73.It%20is%20not%20unlawful,in%20almost%20all%20circumstances%20unnecessary.