[F132CVoluntary provision of dataE+W
(1)If the Commission thinks it appropriate to conduct a data matching exercise using data held by or on behalf of a body or person not subject to section 32B, the data may be disclosed to the Commission or a person acting on its behalf.
(2)A disclosure under subsection (1) does not breach—
(a)any obligation of confidence owed by a person making the disclosure, or
(b)any other restriction on the disclosure of information (however imposed).
(3)But nothing in this section authorises a disclosure which—
(a)contravenes the Data Protection Act 1998 (c. 29), or
(b)is prohibited by Part 1 of the Regulation of Investigatory Powers Act 2000 (c. 23).
(4)Data may not be disclosed under subsection (1) if the data comprise or include patient data.
(5)“Patient data” means data relating to an individual which are held for medical purposes (within the meaning of section 251 of the National Health Service Act 2006 (c. 41)) and from which the individual can be identified.
(6)This section does not limit the circumstances in which data may be disclosed apart from this section.
(7)Data matching exercises may include data provided by a body or person outside England and Wales.]
Textual Amendments
F1Pt. 2A inserted (1.3.2008 for the insertion of s. 32G(1)(3)(4); 6.4.2008 in force so far as not already in force) by Serious Crime Act 2007 (c. 27), s. 94(1), Sch. 7 para. 2; S.I. 2008/219, art. 3(h); S.I. 2008/755, art. 16(a)