12.—(1) The Data Protection Act 2018(1) is amended as follows.
(2) Omit section 204(4)(p) (meaning of “health service body”: the Regional Health and Social Care Board).
(3) In Schedule 3 (exemptions etc from the UK GDPR: health, social work, education and child abuse data), in paragraph 8—
(a)in sub-paragraph (1)(b), for “the Regional Health and Social Care Board” substitute “the Department of Health in Northern Ireland or any person or body exercising functions by virtue of paragraph 22A of Schedule 3 to the Health and Personal Social Services (Northern Ireland) Order 1991(2)”;
(b)in sub-paragraph (1)(c), for sub-paragraph (i) substitute—
“(i)in the exercise of social care and children functions within the meaning of Article 10A of the Health and Personal Social Services (Northern Ireland) Order 1991(3),
(ia)in connection with the provision of social care within the meaning of section 2(5) of the Health and Social Care (Reform) Act (Northern Ireland) 2009 (c. 1 (N.I.)) by virtue of a delegation direction under Article 10B of the Health and Personal Social Services (Northern Ireland) Order 1991(4), or”.
Paragraph 22A of Schedule 3 was inserted by paragraph 148(8) of Schedule 1 to the Health and Social Care Act (Northern Ireland) 2022 (c. 3 (N.I.)).
Article 10A was inserted by paragraph 142 of Schedule 1 to the Health and Social Care Act (Northern Ireland) 2022.
Article 10B was inserted by paragraph 143 of Schedule 1 to the Health and Social Care Act (Northern Ireland) 2022.