5. Subject to regulation 7, confidential patient information may be processed for medical purposes in the circumstances set out in the Schedule to these Regulations provided that the processing has been approved—
(a)in the case of medical research, by both the Secretary of State and a research ethics committee, and
(b)in any other case, by the Secretary of State.