2014 No. 3282

Data Protection

The Data Protection (Assessment Notices) (Designation of National Health Service Bodies) Order 2014

Made

Laid before Parliament

Coming into force

The Secretary of State, in exercise of the powers conferred by section 41A(2)(b) of the Data Protection Act 19981 and having consulted the Commissioner in accordance with section 67(3)2 of that Act, makes the following Order:

Citation and commencement1

This Order may be cited as the Data Protection (Assessment Notices) (Designation of National Health Service Bodies) Order 2014 and comes into force on 1st February 2015.

Designation for purposes of section 41A of the Data Protection Act 19982

The public authorities listed in the Schedule to this Order are designated for the purposes of section 41A of the Data Protection Act 1998.

Simon HughesMinister of State for Justice and Civil LibertiesMinistry of Justice

SCHEDULE

Article 2

PART 1

Designated public authorities: England and Wales

1

The National Health Service Commissioning Board.

2

A clinical commissioning group established under section 14D of the National Health Service Act 20063.

3

A special health authority established under section 28 of the National Health Service Act 2006 or section 22 of the National Health Service (Wales) Act 20064.

4

A Local Health Board established under section 11 of the National Health Service (Wales) Act 2006.

5

A National Health Service trust established under section 25 of the National Health Service Act 2006 or section 18 of the National Health Service (Wales) Act 2006.

6

An NHS foundation trust.

7

A Community Health Council established under section 182 of the National Health Service (Wales) Act 2006.

8

Any person providing primary medical services—

a

in accordance with arrangements made under section 92 of the National Health Service Act 20065 or section 50 of the National Health Service (Wales) Act 2006; or

b

under a contract under section 84 of the National Health Service Act 20066 or section 42 of the National Health Service (Wales) Act 2006,

in respect of personal data contained in information relating to the provision of those services.

9

The Health and Social Care Information Centre.

PART 2

Designated public authorities: Northern Ireland

10

A Health and Social Services Trust established under Article 10 of the Health and Personal Social Services (Northern Ireland) Order 19917.

11

A special agency established under Article 3 of the Health and Personal Social Services (Special Agencies) (Northern Ireland) Order 19908.

12

Any person providing primary medical services under Part VI of the Health and Personal Social Services (Northern Ireland) Order 19729, in respect of personal data contained in information relating to the provision of those services.

13

The Regional Business Services Organisation established under section 14 of the Health and Social Care (Reform) Act (Northern Ireland) 200910.

14

The Patient and Client Council established under section 16 of the Health and Social Care (Reform) Act (Northern Ireland) 2009.

15

The Regional Health and Social Care Board established under section 7 of the Health and Social Care (Reform) Act (Northern Ireland) 2009.

16

The Regional Agency for Public Health and Social Well-being established under section 12 of the Health and Social Care (Reform) Act (Northern Ireland) 2009.

PART 3

Designated public authorities: Scotland

17

The Common Services Agency for the Scottish Health Service.

18

A Health Board constituted under section 2 of the National Health Service (Scotland) Act 197811.

19

The National Waiting Times Centre Board.

20

A local health council established under section 7 of the National Health Service (Scotland) Act 1978.

21

NHS 24.

22

NHS Education for Scotland.

23

NHS Health Scotland.

24

Healthcare Improvement Scotland.

25

Any person providing primary medical services under a general medical services contract within the meaning of the National Health Service (Scotland) Act 1978.

26

The Scottish Ambulance Service Board.

27

The State Hospitals Board for Scotland.

EXPLANATORY NOTE

(This note is not part of the Order)

This Order designates public authorities for the purposes of section 41A of the Data Protection Act 1998 (“the 1998 Act”). The effect of a public authority being designated for this purpose is that it may be served with an assessment notice enabling the Commissioner to determine whether the public authority has, in its capacity as a data controller, complied or is complying with the data protection principles.

Article 2 designates the public authorities listed in the Schedule. The authorities designated are a number of health service bodies in England and Wales, Northern Ireland and Scotland.

A full regulatory impact assessment has not been produced for this instrument as no impact on the private or voluntary sectors is foreseen.