They must follow any relevant laws and rules of their profession which protect data from being seen by anyone who does not have the right to see it
Rhaid iddynt ddilyn holl gyfreithiau a rheolau perthnasol eu proffesiwn sy'n diogelu data rhag cael ei weld gan unrhyw un nad oes ganddo'r hawl i'w weld