This Order designates public authorities for the purposes of section 41A of the Data Protection Act 1998 (“the 1998 Act”). The effect of a public authority being designated for this purpose is that it may be served with an assessment notice enabling the Commissioner to determine whether the public authority has, in its capacity as a data controller, complied or is complying with the data protection principles.

Article 2 designates the public authorities listed in the Schedule. The authorities designated are a number of health service bodies in England and Wales, Northern Ireland and Scotland.

A full regulatory impact assessment has not been produced for this instrument as no impact on the private or voluntary sectors is foreseen.