Data Protection Act 2018
|
Amendment of section 1 of Health (Provision of Information) Act 1997 | ||
|
184. The Health (Provision of Information) Act 1997 is amended by the substitution of the following section for section 1: | ||
“Requests for and provision of information | ||
1. (1) The National Cancer Registry Board (established under the Health (Corporate Bodies) Act 1961 ) may request from any person personal data (including data concerning health and genetic data within the meaning of the Data Protection Regulation) held by, or in the possession of, that person for the purposes of the performance of that Board of its functions. | ||
(2) Without prejudice to his or her obligations under the Data Protection Regulation and the Act of 2018, the person to whom a request is made under subsection (1) shall provide the personal data requested to the extent it is held by, or in the possession of, that person. | ||
(3) The Health Service Executive may, for the purposes of compiling and maintaining a record of the names, addresses, telephone numbers, e-mail addresses and dates of birth of persons who, for public health reasons, may be invited to participate in any cancer screening (including any breast, cervical or bowel cancer screening) programme operated by the Executive, request from any person the names, addresses, telephone numbers, e-mail addresses and dates of birth of persons held by, or in the possession of, that person. | ||
(4) Without prejudice to his or her obligations under the Data Protection Regulation and the Act of 2018, the person to whom a request is made under subsection (3) may provide that information to the extent it is held by, or in the possession of, that person. | ||
(5) In this section— | ||
‘Act of 2018’ means the Data Protection Act 2018; | ||
‘Data Protection Regulation’ means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 201621 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation); | ||
‘personal data’ means personal data within the meaning of the Data Protection Regulation.”. | ||