Yes, we may share personal data with appropriate authorities where there is a lawful basis and legal obligation. Under the GDPR regulations, we must comply with any legal obligation which includes the releasing of personal information to regulators, law enforcement authorities or other bodies where there is a legal requirement to do so, including the sharing of information in accordance with the Regulations.