Specifically, section 2 ignores (The Privacy and Electronic Communications Regulations)[https://ico.org.uk/for-organisations/guide-to-pecr/what-are-...] and section 11 ignores (the consent part)[https://ico.org.uk/for-organisations/guide-to-data-protectio...] of GDPR, without giving a different lawful basis for data processing.