Health and Social Care (Control of Data Processing) Act (Northern Ireland) 2016

Establishment of committee to authorise processing of confidential information and to disseminate information

2.—(1) For the purposes of subsections (2) and (4), the Department must by regulations establish a committee.

(2) Where regulations under section 1 make provision by virtue of subsection (3) of that section, the committee may authorise the processing of confidential information of a relevant person in prescribed circumstances and subject to compliance with prescribed conditions (including conditions requiring prescribed undertakings to be obtained as to the processing of such information).

(3) The circumstances in which the committee may authorise the processing of confidential information of a relevant person shall not include circumstances where that person has made representations to the committee that the relevant person’s confidential information should not be disclosed or processed.

(4) The committee must arrange for the dissemination in such form and manner as it considers appropriate of such information as it may appear to it appropriate to give to the public about the operation of this Act and any other relevant matter, and in particular about the rights of relevant persons regarding the processing of confidential information of those persons.

(5) Regulations under subsection (1) may, in particular, make provision as to—

(a) the persons or bodies who are to be represented by members of the committee,

(b) the appointment, tenure and vacation of office of a Chair and of other members of the committee,

(c) the procedure of the committee,

(d) the payment by the Department of—

(i) such expenses incurred by the committee, and

(ii) such allowances in respect of expenses incurred by members of the committee,

as the Department may determine,

(e) the publication of any authorisations granted by the committee.