PART 5Information sharing

Use and disclosure of information17.

(1)

In this regulation and regulation 18, “relevant information” means—

(a)

Welsh passenger information;

(b)

other UK passenger information.

(2)

For the purposes of this regulation—

(a)

“Welsh passenger information” means—

(i)

passenger information provided to the Secretary of State for the purpose of regulation 4 or 5;

(ii)

information provided to the Secretary of State in a notification given under regulation 7(5)(b), 8(4) or 10(6);

(b)

“other UK passenger information” means information provided to a person under provision in Regulations made as respects England, Scotland or Northern Ireland (as the case may be) that is equivalent to provision mentioned in sub-paragraph (a).

(3)

In this regulation, any reference to the holder of information is a reference to—

(a)

the Secretary of State;

(b)

a person to whom the information was disclosed under paragraph (4) or (5).

(4)

The holder of Welsh passenger information may disclose it to another person (the “recipient”) in circumstances where it is necessary for the recipient to have the information—

(a)

for the purpose of carrying out a function of the recipient under—

(i)

these Regulations, or

(ii)

Regulations made as respects England, Scotland or Northern Ireland (as the case may be) that are equivalent to these Regulations;

(b)

for the purpose of—

(i)

preventing danger to public health as a result of the spread of infection or contamination with coronavirus,

(ii)

monitoring the spread of infection or contamination with coronavirus, or

(iii)

giving effect to any international agreement or arrangement relating to the spread of infection or contamination with coronavirus;

(c)

for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a) or (b).

(5)

The holder of other UK passenger information may disclose it to another person (the “recipient”) in circumstances where it is necessary for the recipient to have the information—

(a)

for the purpose of carrying out a function of the recipient under these Regulations;

(b)

for the purpose of—

(i)

preventing danger to public health in Wales as a result of the spread of infection or contamination with coronavirus,

(ii)

monitoring the spread of infection or contamination with coronavirus in Wales, or

(iii)

giving effect in Wales to any international agreement or arrangement relating to the spread of infection or contamination with coronavirus;

(c)

for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a) or (b).

(6)

A holder of relevant information may not use the information otherwise than—

(a)

for the purpose of carrying out a function of the holder under these Regulations;

(b)

in the case of Welsh passenger information, for a purpose described in paragraph (4)(b);

(c)

in the case of other UK passenger information, for a purpose described in paragraph (5)(b);

(d)

for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a), (b) or (c).

(7)

Despite paragraphs (4), (5) and (6), this regulation does not limit the circumstances in which information may otherwise lawfully be disclosed or used under any other enactment or rule of law.

(8)

Disclosure which is authorised by this regulation does not breach—

(a)

an obligation of confidence owed by the person making the disclosure, or

(b)

any other restriction on the disclosure of information (however imposed).

(9)

Nothing in this regulation authorises the disclosure of personal data where doing so contravenes the data protection legislation.

(10)

In F1paragraph (9), “data protection legislation” and “personal data” have the same meanings as in section 3 of the Data Protection Act 2018 M1.