A Bill to establish, and make provision about, the National Data Guardian for Health and Social Care; and for connected purposes.
Explanatory notes to the Bill, prepared by the Department of Health, with the consent of Jo Churchill, the member in charge of the Bill, are published separately as Bill 84—EN.
Establish, and make provision about, the National Data Guardian for Health and Social Care; and for connected purposes.
Be it enacted by the Queen’s most Excellent Majesty, by and with the advice and consent of the Lords Spiritual and Temporal, and Commons, in this present Parliament assembled, and by the authority of the same, as follows:—
(1) The Secretary of State must appoint a person to hold office as the National Data Guardian for Health and Social Care (in this Act, “the Data Guardian”).
(2) The Data Guardian may publish guidance about the processing of health and adult social care data in England.
(3) The following must have regard to guidance—
(a) a public body exercising functions that relate to the health service, adult social care or adult carer support in England;
(b) a person (other than a public body) providing—
(i) services as part of the health service,
(ii) adult social care, or
(iii) adult carer support,
pursuant to arrangements with a public body falling within paragraph (a).
(4) The Data Guardian must keep guidance under review, to be revised and published as the Data Guardian considers appropriate.
(5) Before publishing guidance, the Data Guardian must consult such persons as the Data Guardian considers appropriate.
(6) The Data Guardian may give advice and information about, and assistance in relation to, the processing of health and adult social care data in England.
(7) The power to publish guidance or to give advice, information and assistance may (as well as being exercised in relation to all cases to which it extends) be exercised in relation to—
(a) those cases subject to specified exceptions, or
(b) particular cases or classes of case.
(8) Nothing in subsection (3) requires a public body or person to have regard to guidance that is not relevant to the functions of the body or the activities of the person that are mentioned in that subsection.
(9) The Schedule (Further provisions about the Data Guardian) has effect.
(1) This section applies for the purposes of section 1 and this section.
(2) “Adult carer support” means support provided to a carer under Part 1 of the Care Act 2014.
(3) “Adult social care”—
(a) includes all forms of personal care and other practical assistance provided for individuals aged 18 or over who, by reason of age, illness, disability, pregnancy, childbirth, dependence on alcohol or drugs, or any other similar circumstances, are in need of such care or other assistance;
(b) does not include anything provided—
(i) by virtue of any of sections 23C to 24D of the Children Act 1989;
(ii) by an establishment or agency for which Her Majesty’s Chief Inspector of Education, Children’s Services and Skills is the registration authority under section 5 of the Care Standards Act 2000;
(iii) by virtue of section 3 of the Adoption and Children Act 2002.
(4) “Carer” has the meaning given in section 10 of the Care Act 2014.
(5) “The health service” means the health service continued under section 1(1) of the National Health Service Act 2006.
(6) “Health and adult social care data” means information (however recorded) that—
(a) relates to—
(i) the physical or mental health or condition of an individual, the diagnosis of his or her condition or his or her care or treatment;
(ii) adult social care provided to an individual (or an assessment for such care);
(iii) adult carer support provided to an individual (or an assessment for such support),
whether or not the identity of the individual is ascertainable, or
(b) is to any extent derived, directly or indirectly, from such information.
(7) “Processing” has the meaning given in section 1(1) of the Data Protection Act 1998.
(8) “Public body” means a body or other person whose functions—
(a) are of a public nature;
(b) include functions of that nature,
but in the case of paragraph (b), the body or person is a public body to the extent only of those functions.
This Act extends to England and Wales only.
(1) This Act comes into force on such day as the Secretary of State may by regulations appoint.
(2) Regulations under this section are to be made by statutory instrument.
This Act may be cited as the Health and Social Care (National Data Guardian) Act 2016.
1 Subject to paragraphs 2 to 6, a person holds and vacates the office of Data Guardian in accordance with the terms of his or her appointment.
2 The period for which a person is appointed as the Data Guardian must not exceed three years.
3 A person who has held office as the Data Guardian may be re-appointed once only.
4 The Data Guardian may at any time resign the office by giving notice in writing to the Secretary of State.
5 The Secretary of State may remove the Data Guardian from office if satisfied that he or she is unable, unwilling or unfit to perform the functions of the Data Guardian.
6 Service as the Data Guardian is not service in the civil service of the state.
7 The Secretary of State may pay to or in respect of the person holding the office of Data Guardian such remuneration, expenses, pensions, allowances or compensation for loss of office as the Secretary of State may determine.
8 The Data Guardian may appoint staff and advisors as the Data Guardian may determine.
9 The Data Guardian may pay—
(a) any remuneration, expenses, allowances and sums by way or in respect of pensions to or in respect of staff;
(b) any expenses and allowances to advisors.
10 Service as a member of staff of or advisor to the Data Guardian is not service in the civil service of the state.
11 The Data Guardian may authorise a member of his or her staff to do anything required or authorised to be done by the Data Guardian.
12 The Data Guardian may make arrangements for persons to be seconded to serve as members of his or her staff.
(13) The arrangements may include provision for payments by the Data Guardian to the person with whom the arrangements are made or directly to seconded staff (or both).
(14) A period of secondment does not affect the continuity of a person’s employment with the employer from whose service he or she is seconded and, in particular, does not affect such a person’s continuity of service in the civil service of the state.
15 The Secretary of State must pay to the Data Guardian such sums as the Secretary of State considers appropriate for the purpose of enabling the Data Guardian to perform his or her functions.
16 The Data Guardian must keep proper accounts and proper records in relation to accounts.
17 As soon as reasonably practical after the end of each financial year, the Data Guardian must produce an annual report which includes—
(a) a statement of accounts for that financial year in such form as the Secretary of State may direct;
(b) a general description of any guidance published and advice, assistance and information given by the Data Guardian in that financial year;
(c) a general description of the Data Guardian’s priorities for the current financial year.
18 The Data Guardian must send a copy of the annual report to the Secretary of State before the end of June next following the financial year to which the statement of accounts relates.
19 The Secretary of State must lay a copy of the annual report before Parliament.
20 “Financial year” means—
(a) the period beginning with the day on which the first person is appointed under section 1 and ending with the following 31 March, and
(b) each successive period of 12 months.