The Health Protection (Coronavirus, International Travel) Regulations (Northern Ireland) 2021

Power to use and disclose information

34.—(1) This regulation applies to a person (P) who holds information described in paragraph (2) (“relevant information”), including where P holds that information as a result of disclosure made in accordance with paragraph (4).

(2) The information referred to in paragraph (1) is—

(a) information provided on the Passenger Locator Form, or

(b) DA information received for a purpose described in paragraph (4)(a)(i),

(c) where a person (B) is required to isolate under these Regulations—

(i) the details of any such period of isolation (including the start and end dates of that period and the reason it was imposed),

(ii) a copy of any notice given to B which contains information about the requirement to isolate,

(iii) information generated where B books, or attempts to book, accommodation as part of a managed isolation package,

(iv) the details of any location in which B undertakes any period of managed isolation (including the name and address of the location),

(v) information relating to B obtained by P in the course of providing accommodation to B pursuant to a managed isolation package (including B’s room number, the personal details of any of B’s co-habitants, and the details of any absence of B, authorised or otherwise, from the place where B is isolating),

(vi) information relating to B obtained by P in the course of providing transport to a location at which B undertakes, or is due to undertake, any period of managed isolation,

(vii) information relating to B obtained by P in the course of providing any service in connection with a managed isolation package,

(d) where B is required to obtain a testing package or undertake a test under regulation 8 or Schedule 6—

(i) information generated where B books, or attempts to book, a testing package for the purposes of regulation 8,

(ii) a copy of any notice given to B which contains information about the requirement to book a testing package or to undertake a test,

(iii) information P obtained under paragraph 8(3) or (4) of Schedule 6,

(iv) the results of a test undertaken by B in accordance with Schedule 6 (whether or not that test was provided as part of a testing package),

(v) information obtained by P in the course of providing a test that falls within paragraph (iv) and is undertaken, or in the course of arranging for such a test to be undertaken, by B (including confirmation that the test was undertaken, details of when and where it was undertaken, any reasons for a test not being undertaken and the details of any replacement test to be undertaken),

(e) information provided to an immigration officer pursuant to regulations 4(7), 6(6), 8(10), or paragraph 16 of Schedule 7, or

(f) where a sample taken in respect of a day 2 test under regulation 8 has been sequenced, the sorted BAM file relating to that sample containing all reads aligning to the SARS-CoV-2 reference genome with unaligned and human reads removed.

(3) P may only use relevant information where it is necessary—

(a) for the purpose of carrying out a function under these Regulations or the Health Protection (Coronavirus, International Travel, Operator Liability and Information to Passengers) Regulations (Northern Ireland) 2021,

(b) for the purpose of—

(i) preventing danger to public health as a result of the spread of infection or contamination,

(ii) monitoring the spread of infection or contamination, or

(iii) giving effect to any international agreement or arrangement relating to the spread of infection or contamination, or

(c) for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a) or (b).

(4) Subject to paragraph (7), P may only disclose relevant information to another person (the “recipient”) where it is necessary for the recipient to have the information—

(a) for the purpose of carrying out a function of the recipient under—

(i) these Regulations or the Health Protection (Coronavirus, International Travel, Operator Liability and Information to Passengers) Regulations (Northern Ireland) 2021, or

(ii) an enactment which, in England, Scotland, or Wales, has the effect of requiring the isolation or quarantine of persons who have been outside the common travel area, for any of the purposes described in sub-paragraph (b),

(b) for the purpose of—

(i) preventing danger to public health as a result of the spread of infection or contamination,

(ii) monitoring the spread of infection or contamination, or

(iii) giving effect to any international agreement or arrangement relating to the spread of infection or contamination, or

(c) for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a) or (b).

(5) A constable or a person responsible for arranging or providing services (including security services) in respect of accommodation as part of a managed isolation package may, where necessary for the purpose of carrying out a function under these Regulations, request from B the following information—

(a) confirmation that B possesses a testing package for the purposes of regulation 8 and the details of that testing package (including the time and date of the tests),

(b) confirmation that B has undertaken any test in accordance with a testing package and, if not, an account of the reasons,

(c) the result of any test B has undertaken in accordance with a testing package.

(6) Subject to paragraph (8), disclosure which is authorised by this regulation does not breach—

(a) an obligation of confidence owed by the person making the disclosure, or

(b) any other restriction on the disclosure of information (however imposed).

(7) This regulation does not limit the circumstances in which information may otherwise lawfully be disclosed under any other enactment or rule of law.

(8) Nothing in this regulation authorises the use or disclosure of personal data where doing so contravenes the data protection legislation.

(9) For the purposes of this regulation—

“data protection legislation” and “personal data” have the same meanings as in section 3 of the Data Protection Act 2018(1),

“DA information” means information provided in accordance with, or as described in, an enactment which, in England, Scotland or Wales, has the effect of requiring the isolation or quarantine of persons who have been outside the common travel area, for any of the purposes described in paragraph (3)(b).

(1)

2018 c. 12