65. (1) Subject to Article 82 of the General Data Protection Regulation, a person to whom this subsection applies shall not be liable in damages in respect of any act done or omitted to be done by him or her in the performance, or purported performance, of his or her functions under this Act, unless the act or omission concerned was done in bad faith.

(2) Subject to Article 82 of the General Data Protection Regulation, the State shall not be liable in damages in respect of any act done or omitted to be done by a person to whom subsection (1) applies, in the performance, or purported performance, by the person of its, his or her functions under this Act unless the act or omission concerned was done in bad faith.

(3) Subsection (1) applies to—

(a) the Authority,

(b) the Agency,

(c) a member or former member of the Board of the Authority,

(d) a member or former member of the Board of the Agency,

(e) an employee or former employee of the Authority,

(f) an employee or former employee of the Agency, and

(g) a relevant body designated under this Act.