The Health Protection (Coronavirus, Pre-Departure Testing and Operator Liability) (England) (Amendment) Regulations 2021

Power to use and disclose information

11.—(1) This regulation applies to any person (“P”) who holds information described in paragraph (2) relating to a relevant passenger (“relevant information”).

(2) The information referred to in paragraph (1) is—

(a) information provided by, or on behalf of, the relevant passenger by way of explanation for failing to comply with regulation 3 or 3A of the International Travel Regulations,

(b) information about the steps taken, pursuant to the International Travel Regulations, in relation to the relevant passenger, including details of any fixed penalty notice issued under those Regulations,

(c) personal details of the relevant passenger, including their—

(i) full name,

(ii) date of birth,

(iii) passport number, or travel document reference number (as appropriate), issue and expiry dates and issuing authority,

(iv) home address,

(v) telephone number,

(vi) email address,

(d) journey details of the relevant passenger, including—

(i) their time and date of arrival in England,

(ii) the name of the operator of the relevant service on which they arrived or through which their booking was made,

(iii) their coach number,

(iv) the flight number or vessel name,

(v) the departure and arrival locations of the relevant service.

(3) P may only use relevant information where it is necessary for the purpose of carrying out a function under these Regulations.

(4) P may only disclose relevant information to another person (“the recipient”) where it is necessary for the recipient to have the relevant information for the purpose of carrying out a function under these Regulations.

(5) This regulation does not limit the circumstances in which information may otherwise lawfully be disclosed under any other enactment or rule of law.

(6) Nothing in this regulation authorises the use or disclosure of personal data where doing so contravenes the data protection legislation.

(7) For the purposes of this regulation “data protection legislation” and “personal data” have the same meanings as in section 3 of the Data Protection Act 2018(1).

(1)

2018 c. 12.