Regulation 2

SCHEDULE 1 U.K. SPECIFIED PUBLIC AUTHORITIES

• The Secretary of State;

• [F1 the Minister for the Cabinet Office;]

• any Northern Ireland Department;

• the Scottish Ministers;

• the Welsh Ministers;

• the Treasury;

• [F2 the Treasury Solicitor;]

• the Commissioners for Her Majesty's Revenue and Customs;

• the Bank of England;

• the Director of Public Prosecutions;

• the Director of Public Prosecutions for Northern Ireland;

• the Serious Fraud Office;

• the Secret Intelligence Service;

• the Security Service;

• the Government Communications Headquarters;

• [F3 the Financial Conduct Authority;

• the Prudential Regulation Authority;]

• [F4 the Competition and Markets Authority;];

• the Pensions Regulator;

• the Panel on Takeovers and Mergers;

• the Regulator of Community Interest Companies;

• the Registrar of Credit Unions for Northern Ireland;

• F5 ...

• the Office of the Information Commissioner;

• the Charity Commission;

• the Charity Commission for Northern Ireland;

• the Office of the Scottish Charity Regulator;

• [F6 the Office of Communications];

• the Gas and Electricity Markets Authority;

• the Northern Ireland Authority for Utility Regulation;

• the Gambling Commission;

• the Serious Organised Crime Agency;

• the Health and Safety Executive;

• [F7 the Office for Nuclear Regulation;]

• the Health and Safety Executive for Northern Ireland;

• the Food Standards Agency;

• [F8 the Gangmasters Labour and Abuse Authority];

• the Security Industry Authority;

• a local authority within the meaning of section 54(2) of the Act;

• an official receiver appointed under section 399 of the Insolvency Act 1986 M1 (appointment, etc, of official receivers);

• the Official Receiver for Northern Ireland;

• the Crown Office and Procurator Fiscal Services;

• [F9 the Marine Management Organisation;]

• a person acting as an insolvency practitioner within the meaning of section 388 of the Insolvency Act 1986 M2 (meaning of “act as an insolvency practitioner”) or Article 3 of the Insolvency (Northern Ireland) Order 1989 M3 (“act as an insolvency practitioner”);

• an inspector appointed under Part 14 of the 1985 Act (investigation of companies and their affairs: requisition of documents) or Part 15 of the 1986 Order or a person appointed under regulation 30 of the Open-Ended Investment Companies Regulations 2001 M4 (power to investigate) or regulation 22 of the Open-Ended Investment Companies Regulations (Northern Ireland) 2004 M5 ;

• any person authorised to exercise powers under section 447 of the 1985 Act M6 (power to require documents and information), or section 84 of the Companies Act 1989 M7 (exercise of powers by officers, etc) or Article 440 of the 1986 Order;

• any person exercising functions conferred by Part 6 of the Financial Services and Markets Act 2000 M8 (official listing) F10 ...;

• a person appointed to make a report under section 166 [F11 or 166A] (reports by skilled persons) of the Financial Services and Markets Act 2000;

• a person appointed to conduct an investigation under section 167 (appointment of persons to carry out general investigations) or 168(3) or (5) (appointment of persons to carry out investigations in particular cases) of the Financial Services and Markets Act 2000 M9 ;

• an inspector appointed under section 284 (power to investigate) of the Financial Services and Markets Act 2000;

• F12 ...M10

• a police force [F13 ;

• the Scottish Housing Regulator] [F14 ;

• the lead enforcement authority (as defined in section 33(1) of the Estate Agents Act 1979) exercising functions under the Estate Agents Act 1979].

Textual Amendments

F1 Words in Sch. 1 inserted (30.6.2015) by The Companies (Disclosure of Address) (Amendment) Regulations 2015 (S.I. 2015/842), regs. 1, 2(2)

F2 Words in Sch. 1 inserted (6.4.2016) by The Register of People with Significant Control Regulations 2016 (S.I. 2016/339), reg. 1(2), Sch. 5 para. 8(a)

F3 Words in Sch. 1 substituted (1.4.2013) by The Financial Services Act 2012 (Consequential Amendments and Transitional Provisions) Order 2013 (S.I. 2013/472), Sch. 2 para. 157(a)(i)

F4 Words in Sch. 1 substituted (1.4.2014) by The Enterprise and Regulatory Reform Act 2013 (Competition) (Consequential, Transitional and Saving Provisions) (No. 2) Order 2014 (S.I. 2014/549), art. 1(1), Sch. 1 para. 37(a) (with art. 3)

F5 Words in Sch. 1 omitted (1.4.2014) by virtue of The Enterprise and Regulatory Reform Act 2013 (Competition) (Consequential, Transitional and Saving Provisions) (No. 2) Order 2014 (S.I. 2014/549), art. 1(1), Sch. 1 para. 37(b) (with art. 3)

F6 Words in Sch. 1 substituted (1.10.2011) by The Postal Services Act 2011 (Consequential Modifications and Amendments) Order 2011 (S.I. 2011/2085), art. 1(2), Sch. 1 para. 79

F7 Words in Sch. 1 inserted (1.4.2014) by The Energy Act 2013 (Office for Nuclear Regulation) (Consequential Amendments, Transitional Provisions and Savings) Order 2014 (S.I. 2014/469), art. 1(2), Sch. 3 para. 195 (with Sch. 4)

F8 Words in Sch. 1 substituted (12.7.2016) by The Immigration Act 2016 (Consequential Amendments) Regulations 2016 (S.I. 2016/655), reg. 1, Sch. para. 4

F9 Words in Sch. 1 inserted (1.10.2010) by The Companies (Disclosure of Address) (Amendment) Regulations 2010 (S.I. 2010/2156), regs. 1, 2

F10 Words in Sch. 1 omitted (1.4.2013) by virtue of The Financial Services Act 2012 (Consequential Amendments and Transitional Provisions) Order 2013 (S.I. 2013/472), Sch. 2 para. 157(a)(ii)

F11 Words in Sch. 1 inserted (1.4.2013) by The Financial Services Act 2012 (Consequential Amendments and Transitional Provisions) Order 2013 (S.I. 2013/472), Sch. 2 para. 157(a)(iii)

F12 Words in Sch. 1 omitted (6.4.2016) by virtue of The Register of People with Significant Control Regulations 2016 (S.I. 2016/339), reg. 1(2), Sch. 5 para. 8(b)

F13 Words and semicolon in Sch. 1 inserted (1.4.2012) by The Housing (Scotland) Act 2010 (Consequential Provisions and Modifications) Order 2012 (S.I. 2012/700), art. 1(3), Sch. para. 20

F14 Words and semicolon in Sch. 1 inserted (31.3.2014) by The Public Bodies (Abolition of the National Consumer Council and Transfer of the Office of Fair Trading’s Functions in relation to Estate Agents etc) Order 2014 (S.I. 2014/631), art. 1(5), Sch. 2 para. 11 (with Sch. 1 para. 28, Sch. 2 paras. 13-15)

Marginal Citations

M1 1986 c.45. Section 399 was amended by section 269 of the Enterprise Act 2002 (c.40).

M2 Section 388 was amended by section 4 of the Insolvency Act 2000 (c.39) and the Insolvency Act (Amendment) (No. 2) Regulations 2002 (S.I. 2002/1240).

M3 S.I. 1989/2405 (N.I. 9).

M4 S.I. 2001/1228.

M5 S.R. (NI) 2004 No 335.

M6 Section 447 was substituted by section 21 of the Companies (Audit, Investigations and Community Enterprise) Act 2004 (c.27).

M7 1989 c.40.

M8 2000 c.8.

M9 Sections 167 and 168 were amended by the Financial Services and Markets Act 2000 (Markets in Financial Instruments) Regulations 2007 (S.I. 2007/176).

M10 Section 82 was amended by section 79 of the Criminal Justice Act 1993 (c.36), the Financial Services and Markets Act 2000 (Consequential Amendments and Repeals) Order 2001 (S.I. 2001/3649) and the Prospectus Regulations 2005 (S.I. 2005/1433).

Regulations 2 and 3

SCHEDULE 2 U.K. CONDITIONS FOR PERMITTED DISCLOSURE

PART 1 U.K. Disclosure to specified public authorities

1.  Paragraphs 2 and 3 set out the conditions specified for the disclosure of protected information by the registrar to a specified public authority. U.K.

2.  The specified public authority has delivered to the registrar a statement that it intends to use the protected information only for the purpose of facilitating the carrying out by that specified public authority of a public function (“the permitted purpose”). U.K.

3.  Subject to paragraph 4, the specified public authority (“ the authority”) has delivered to the registrar a statement that it will, where it supplies a copy of the protected information to a processor for the purpose of processing the information for use in respect of the permitted purpose— U.K.

(a) ensure that the processor is one who carries on business in the European Economic Area;

(b) require that the information is not transmitted outside the European Economic Area by the processor; and

(c) require that the processor does not disclose the information except to the authority or an employee of the authority.

4.  Paragraph 3 does not apply where the specified public authority is the [F15 National Crime Agency,] Secret Intelligence Service, Security Service or Government Communications Headquarters. U.K.

Textual Amendments

F15 Words in Sch. 2 para. 4 inserted (6.4.2016) by The Register of People with Significant Control Regulations 2016 (S.I. 2016/339), reg. 1(2), Sch. 5 para. 9

PART 2 U.K. Disclosure to a credit reference agency

5.  Paragraphs 6 to 10 set out the conditions specified for the disclosure of protected information by the registrar to a credit reference agency. U.K.

6.  The credit reference agency— U.K.

(a) is carrying on in the United Kingdom or in another EEA State a business comprising the furnishing of information relevant to the financial standing of individuals, being information collected by the agency for that purpose;

(b) maintains appropriate procedures—

(i) to ensure that an independent person can investigate and audit the measures maintained by the agency for the purposes of ensuring the security of any protected information disclosed to that agency; and

(ii) for the purposes of ensuring that it complies with its obligations under the Data Protection Act 1998 M11 , or, where the agency carries on business in a EEA State other than the United Kingdom, with its obligations under legislation implementing Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data M12 ;

(c) has not been found guilty of an offence under—

(i) section 1112 (general false statement offence) of the Act or section 2 of the Fraud Act 2006 M13 (fraud by false representation); or

(ii) section 47 (failure to comply with enforcement notice) of the Data Protection Act 1998 in circumstances where it has used the protected information for purposes other than those described in sub-paragraphs (a) to (e) of paragraph 7 below.

Marginal Citations

M11 1998 c.29.

M12 OJ L 81, 23.11.1995, p. 31.

M13 2006 c.35.

7.  The credit reference agency has delivered to the registrar a statement that it intends to use the protected information only for the purposes of— U.K.

(a) providing an assessment of the financial standing of a person;

(b) meeting any obligations contained in the Money Laundering Regulations 2007 M14 or any [F16 rules made pursuant to section 137A of the Financial Services and Markets Act 2000 which relate to the prevention and detection of money laundering in connection with the carrying on of regulated activities by authorised persons], or in any legislation of another EEA State implementing Directive 2005/60/EC of the European Parliament and of the Council of 26 October 2005 on the prevention of the use of the financial system for the purpose of money laundering and terrorist financing M15 ;

(c) conducting conflict of interest checks required or made necessary by any enactment;

(d) the provision of protected information to—

(i) a public authority specified in Schedule 1 which has satisfied the requirements of paragraphs 2 and 3 of this Schedule; or

(ii) a credit reference agency which has satisfied the requirements of this Part of this Schedule; or

(e) conducting checks for the prevention and detection of crime and fraud.

Textual Amendments

F16 Words in Sch. 2 para. 7(b) substituted (1.4.2013) by The Financial Services Act 2012 (Consequential Amendments and Transitional Provisions) Order 2013 (S.I. 2013/472), art. 1(1), Sch. 2 para. 157(b)

Marginal Citations

M14 S.I. 2007/2157.

M15 OJ L 309, 25.11.2005, p. 15.

8.  The credit reference agency has delivered to the registrar a statement that it intends to take delivery of and to use the protected information only in the United Kingdom or in another EEA State. U.K.

9.  The credit reference agency has delivered to the registrar a statement that it will, where it supplies a copy of the protected information to a processor for the purpose of processing the information for use in respect of the purposes referred to in paragraph 7— U.K.

(a) ensure that the processor is one who carries on business in the European Economic Area;

(b) require that the information is not transmitted outside the European Economic Area by the processor; and

(c) require that the processor does not disclose the information except to the credit reference agency or an employee of the credit reference agency.

10.  The credit reference agency has delivered to the registrar a statement that it meets the conditions in paragraph 6 above. U.K.

PART 3 U.K. Interpretation of this Schedule

11.—(1) In this Schedule— U.K.

“processor” means any person who provides a service which consists of putting information into data form or processing information in data form and any reference to a processor includes a reference to his employees; and

“public function” includes—

(a)

any function conferred by or in accordance with any provision contained in any enactment;

(b)

any function conferred by or in accordance with any provision contained in the [F17 EU] Treaties or any [F17 EU] instrument;

(c)

any similar function conferred on persons by or under provisions having effect as part of the law of a country or territory outside the United Kingdom; and

(d)

any function exercisable in relation to the investigation of any criminal offence or for the purpose of any criminal proceedings.

(2) In this Schedule any reference to—

(a) an employee of any person who has access to protected information shall be deemed to include any person working or providing services for the purposes of that person or employed by or on behalf of, or working for, any person who is so working or who is supplying such a service; and

(b) the disclosure for the purpose of facilitating the carrying out of a public function includes disclosure in relation to, and for the purpose of, any proceedings whether civil, criminal or disciplinary in which the specified public authority engages while carrying out its public functions.

Textual Amendments

F17 Word in Regulations substituted (22.4.2011) by The Treaty of Lisbon (Changes in Terminology) Order 2011 (S.I. 2011/1043), arts. 2, 3-6, 8-10