The Health Protection (Coronavirus, Restrictions) (Self-Isolation) (England) Regulations 2020

Power to use and disclose information

14.—(1) A person referred to in regulation 2(4) may disclose the information described in paragraph (2) (“relevant information”), to any person (H) for the purposes of—

(a) carrying out a function under these Regulations, or

(b) preventing danger to the health of the public as a result of the spread of infection or contamination with coronavirus or coronavirus disease.

(2) The relevant information referred to in paragraph (1) is—

(a) where an individual is required to self-isolate under regulation 2—

(i) contact details of that individual,

(ii) the date that individual received a notification under regulation 2,

(iii) the particular period in respect of which that individual is required to self-isolate calculated in accordance with regulation 3,

(iv) details of any notices issued or contemplated under regulation 12, or proceedings taken under regulation 13 in respect of that individual.

for the purposes of this regulation “contact details” means the name, address and where available, the telephone number of the individual.

(b) confirmation an individual is not required to self-isolate under regulation 2.

(3) H may only use relevant information disclosed under paragraph (1) where it is necessary—

(a) for the purpose of carrying out a function under these Regulations,

(b) for the purpose of—

(i) preventing danger to the health of the public as a result of the spread of infection or contamination with coronavirus or coronavirus disease,

(ii) monitoring the spread of infection or contamination with coronavirus or coronavirus disease, or

(c) for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a) or (b).

(4) Subject to paragraph (6), H may only disclose relevant information to another person (the “recipient”) where it is necessary for the recipient to have that information—

(a) for the purpose of carrying out a function of the recipient under these Regulations,

(b) for the purpose of preventing danger to the health of the public as a result of the spread of infection or contamination with coronavirus or coronavirus disease, or

(c) for a purpose connected with, or otherwise incidental to, a purpose described in sub-paragraph (a) or (b).

(5) Subject to paragraph (7), disclosure which is authorised by this regulation does not breach—

(a) an obligation of confidence owed by the person making the disclosure, or

(b) any other restriction on the disclosure of information (however imposed).

(6) This regulation does not limit the circumstances in which information may otherwise lawfully be disclosed under any other enactment or rule of law.

(7) Nothing in this regulation authorises the use or disclosure of personal data where doing so contravenes the data protection legislation.

(8) For the purposes of this regulation—

(a) “data protection legislation” and “personal data” have the same meanings as in section 3 of the Data Protection Act 2018;

(b) “coronavirus disease” means COVID-19 (the official designation of the disease which can be caused by coronavirus).