PART 5Information sharing

Use and disclosure of information17.

(1)

In this regulation and regulation 18, “relevant information” means—

(a)

Welsh passenger information;

(b)

other UK passenger information.

(2)

For the purposes of this regulation—

(a)

“Welsh passenger information” means—

(i)

passenger information provided to the Secretary of State for the purpose of regulation 4 or 5;

(ii)

information provided to the Secretary of State in a notification given under regulation 7(5)(b), 8(4) or 10(6);

F1(iii)

where a person F2arranges or takes a test under regulation 6AB—

(aa)

information generated where the person arranges or takes a test;

(bb)

information obtained by a public test provider (within the meaning given by F3regulation 6AB(2)(c)) under F4regulation 6AB(6);

(cc)

the results of a test;

(dd)

information recorded by a public test provider in the course of administering a test taken in accordance with F5regulation 6AB (including confirmation that the test was taken, details of when and where it was taken, any reasons for a test not being taken and the details of any replacement test to be taken);

(iv)

information provided to an immigration officer pursuant to F6regulation 6AB(11);

(v)

where a sample taken in respect of a day 2 test under F7regulation 6AB has been sequenced, the sorted BAM file relating to that sample containing all reads aligning to the SARS-CoV-2 reference genome with unaligned and human reads removed;

(b)

“other UK passenger information” means information provided to a person under provision in Regulations made as respects England, Scotland or Northern Ireland (as the case may be) that is equivalent to provision mentioned in sub-paragraph (a).

(3)

In this regulation, any reference to the holder of information is a reference to—

(a)

the Secretary of State;

(b)

a person to whom the information was disclosed under paragraph (4) or (5);

F8(c)

a public test provider;

(d)

an immigration officer.

(4)

The holder of Welsh passenger information may disclose it to another person (the “recipient”) in circumstances where it is necessary for the recipient to have the information—

(a)

for the purpose of carrying out a function of the recipient under—

(i)

these Regulations, or

(ii)

Regulations made as respects England, Scotland or Northern Ireland (as the case may be) that are equivalent to these Regulations;

(b)

for the purpose of—

(i)

preventing danger to public health as a result of the spread of infection or contamination with coronavirus,

(ii)

monitoring the spread of infection or contamination with coronavirus, or

(iii)

giving effect to any international agreement or arrangement relating to the spread of infection or contamination with coronavirus;

(c)

for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a) or (b).

(5)

The holder of other UK passenger information may disclose it to another person (the “recipient”) in circumstances where it is necessary for the recipient to have the information—

(a)

for the purpose of carrying out a function of the recipient under these Regulations;

(b)

for the purpose of—

(i)

preventing danger to public health in Wales as a result of the spread of infection or contamination with coronavirus,

(ii)

monitoring the spread of infection or contamination with coronavirus in Wales, or

(iii)

giving effect in Wales to any international agreement or arrangement relating to the spread of infection or contamination with coronavirus;

(c)

for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a) or (b).

(6)

A holder of relevant information may not use the information otherwise than—

(a)

for the purpose of carrying out a function of the holder under these Regulations;

(b)

in the case of Welsh passenger information, for a purpose described in paragraph (4)(b);

(c)

in the case of other UK passenger information, for a purpose described in paragraph (5)(b);

(d)

for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a), (b) or (c).

(7)

Despite paragraphs (4), (5) and (6), this regulation does not limit the circumstances in which information may otherwise lawfully be disclosed or used under any other enactment or rule of law.

(8)

Disclosure which is authorised by this regulation does not breach—

(a)

an obligation of confidence owed by the person making the disclosure, or

(b)

any other restriction on the disclosure of information (however imposed).

(9)

Nothing in this regulation authorises the disclosure of personal data where doing so contravenes the data protection legislation.

(10)

In F9paragraph (9), “data protection legislation” and “personal data” have the same meanings as in section 3 of the Data Protection Act 2018 M1.