Valid from 01/03/2008
Textual Amendments
F1Pt. 3A inserted (1.3.2008 for s. 64G(1)(3)(4) and 6.4.2008 otherwise) by Serious Crime Act 2007 (c. 27), ss. 73, 94, Sch. 7 para. 4; S.I. 2008/219, art. 3(i); S.I. 2008/755, art. 16
Valid from 06/04/2008
(1)If the Auditor General for Wales thinks it appropriate to conduct a data matching exercise using data held by or on behalf of a body or person not subject to section 64B, the data may be disclosed to the Auditor General or a person acting on his behalf.
(2)A disclosure under subsection (1) does not breach—
(a)any obligation of confidence owed by a person making the disclosure, or
(b)any other restriction on the disclosure of information (however imposed).
(3)But nothing in this section authorises a disclosure which—
(a)contravenes the Data Protection Act 1998 (c. 29), or
(b)is prohibited by Part 1 of the Regulation of Investigatory Powers Act 2000 (c. 23).
(4)Data may not be disclosed under subsection (1) if the data comprise or include patient data.
(5)“Patient data” means data relating to an individual which are held for medical purposes (within the meaning of section 251 of the National Health Service Act 2006 (c. 41)) and from which the individual can be identified.
(6)This section does not limit the circumstances in which data may be disclosed apart from this section.
(7)Data matching exercises may include data provided by a body or person outside England and Wales.]