Mental Health Act 20266

Processing of personal data and special categories of personal data

190. (1) The Commission may process personal data, including special categories of personal data, in accordance with the General Data Protection Regulation and the Act of 2018 and any regulations under section 191 to the extent necessary and proportionate for the performance of its functions under this Act.

(2) For the purposes of this Act, the Commission is designated as controller in relation to personal data processed by it for the purposes of the performance of its functions under this Act.

(3) Personal data processed for the purposes referred to in subsection (1) shall not be retained for any period beyond which it is required and shall be permanently deleted after it is no longer required.