47.—(1) This Part applies to a person in Scotland (“P”) who holds relevant information, including where P holds that information as a result of disclosure made in accordance with paragraph (3).
(2) P may only use relevant information where it is necessary—
(a)for the purpose of carrying out a function under these Regulations,
(b)for the purpose of—
(i)preventing danger to public health as a result of the spread of infection or contamination with coronavirus,
(ii)monitoring the spread of infection or contamination with coronavirus or the incidence of coronavirus disease,
(iii)giving effect to any international agreement or arrangement relating to the spread of infection or contamination with coronavirus or the incidence of coronavirus disease,
(c)for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraphs (a) or (b).
(3) Subject to paragraph (6), P may only disclose relevant information to another person (“the recipient”) where it is necessary for the recipient to have the information—
(a)for the purpose of carrying out a function of the recipient under—
(i)these Regulations, or
(ii)regulations made as respects England, Wales or Northern Ireland (as the case may be) that have the effect of requiring the isolation or quarantine of persons who have been outside the common travel area, for any of the purposes mentioned in sub-paragraph (b),
(b)for the purpose of—
(i)preventing danger to public health as a result of the spread of infection or contamination with coronavirus,
(ii)monitoring the spread of infection or contamination with coronavirus or the incidence of coronavirus disease,
(iii)giving effect to any international agreement or arrangement relating to the spread of infection or contamination with coronavirus or the incidence of coronavirus disease, or
(c)for a purpose connected with, or otherwise incidental to, a purpose described in paragraph (a) or (b).
(4) A constable or a person responsible for arranging or providing services (including security services) in respect of accommodation as part of a managed isolation package may, where necessary for the purpose of carrying out a function under these Regulations, request from B (see regulation 48(1)(c)) the following information—
(a)confirmation that B possesses a testing package (within the meaning of regulation 11(3)) and the details of that testing package (including the time and date of the tests),
(b)confirmation that B has undertaken any test in accordance with the testing package and, if not, an account of the reasons,
(c)the result of any test B has undertaken in accordance with a testing package.
(5) Subject to paragraph (7), disclosure which is authorised by this regulation does not breach an obligation of confidence owed by the person making the disclosure.
(6) Nothing in this regulation limits the circumstances in which information may otherwise lawfully be disclosed under any other enactment or rule of law.
(7) Nothing in this regulation authorises the use or disclosure of personal data where doing so contravenes the data protection legislation.
(8) In paragraph (7), “the data protection legislation” and “personal data” have the meanings given in section 3 of the Data Protection Act 2018 M1.