The Health Protection (Coronavirus, International Travel, Operator Liability and Information to Passengers) Regulations (Northern Ireland) 2021

Power to use and disclose information

9.—(1) This regulation applies to any person (“P”) who holds information described in paragraph (2) relating to a defaulting passenger (“relevant information”).

(2) The information referred to in paragraph (1) is—

(a) information provided by, or on behalf of, the defaulting passenger by way of explanation for failing to comply with regulation 4, 6, 8, 10 or 14 of the International Travel Regulations,

(b) information about the steps taken, pursuant to the International Travel Regulations, in relation to the defaulting passenger, including details of any fixed penalty notice issued under those Regulations,

(c) personal details of the defaulting passenger, including their—

(i) name,

(ii) date of birth,

(iii) passport number, or travel document reference number (as appropriate), issue and expiry dates and issuing authority,

(iv) home address,

(v) telephone number,

(vi) email address,

(d) journey details of the defaulting passenger, including—

(i) their time and date of arrival in Northern Ireland,

(ii) the name of the operator of the relevant service on which they arrived or through which their booking was made,

(iii) their coach number,

(iv) the flight number or vessel name,

(v) the departure and arrival locations of the relevant service.

(3) P may only use relevant information where it is necessary for the purpose of carrying out a function under these Regulations.

(4) P may only disclose relevant information to another person (“the recipient”) where it is necessary for the recipient to have the relevant information for the purpose of carrying out a function under these Regulations.

(5) This regulation does not limit the circumstances in which information may otherwise lawfully be disclosed under any other enactment or rule of law.

(6) Nothing in this regulation authorises the use or disclosure of personal data where doing so contravenes the data protection legislation.

(7) For the purposes of this regulation “data protection legislation” and “personal data” have the same meanings as in section 3 of the Data Protection Act 2018.