Data protection law does not prevent organisations taking steps to address the spread of coronavirus, regulators have said.