Power to use and disclose informationE+W
9.—(1) This regulation applies to a person (“P”) who holds information described in paragraph (2) (“relevant information”), including where P holds that information as a result of disclosure made in accordance with paragraph (4).
(2) The information referred to in paragraph (1) is—
(a)information provided on the Passenger Locator Form, or
(b)DA information received for a purpose described in paragraph (4)(a)(i).
(3) P may only use relevant information where it is necessary—
(a)for the purpose of carrying out a function under these Regulations,
(b)for the purpose of—
(i)preventing danger to public health as a result of the spread of infection or contamination with coronavirus or coronavirus disease,
(ii)monitoring the spread of infection or contamination with coronavirus or coronavirus disease, or
(iii)giving effect to any international agreement or arrangement relating to the spread of infection or contamination with coronavirus or coronavirus disease, or
(c)for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a) or (b).
(4) Subject to paragraph (6), P may only disclose relevant information to another person (the “recipient”) where it is necessary for the recipient to have the information —
(a)for the purpose of carrying out a function of the recipient under—
(i)these Regulations, or
(ii)an enactment which, in Scotland, Wales or Northern Ireland, has the effect of requiring the isolation or quarantine of persons who have been outside the common travel area, for any of the purposes described in sub-paragraph (b),
(b)for the purpose of—
(i)preventing danger to public health as a result of the spread of infection or contamination with coronavirus or coronavirus disease,
(ii)monitoring the spread of infection or contamination with coronavirus or coronavirus disease, or
(iii)giving effect to any international agreement or arrangement relating to the spread of infection or contamination with coronavirus or coronavirus disease, or
(c)for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a) or (b).
(5) Subject to paragraph (7), disclosure which is authorised by this regulation does not breach—
(a)an obligation of confidence owed by the person making the disclosure, or
(b)any other restriction on the disclosure of information (however imposed).
(6) This regulation does not limit the circumstances in which information may otherwise lawfully be disclosed under any other enactment or rule of law.
(7) Nothing in this regulation authorises the use or disclosure of personal data where doing so contravenes the data protection legislation.
(8) For the purposes of this regulation—
(a)“data protection legislation” and “personal data” have the same meanings as in section 3 of the Data Protection Act 2018 M1,
(b)“DA information” means information provided in accordance with, or as described in, an enactment which, in Scotland, Wales or Northern Ireland, has the effect of requiring the isolation or quarantine of persons who have been outside the common travel area, for any of the purposes described in paragraph (3)(b).