The Assembly may for the purpose of arrangements under section 25 or 28 above or under section 175 of the Education Act 2002—
The Assembly may for the purposes of arrangements under subsection (1)(b) by regulations establish a body corporate to establish and operate one or more databases.
A database under this section may only include information falling within subsection (4) in relation to a person to whom arrangements specified in subsection (1) relate.
The information referred to in subsection (3) is information of the following descriptions in relation to a person—
The Assembly may by regulations make provision in relation to the establishment and operation of any database or databases under this section.
Regulations under subsection (5) may in particular make provision—
The persons and bodies referred to in subsection (6)(b) are—
The persons and bodies referred to in subsection (6)(c) are—
The Assembly and the Secretary of State may provide information for inclusion in a database under this section.
The provision which may be made under subsection (6)(e) includes provision for a person of a description specified in the regulations to determine what must or may be done under the regulations.
Regulations under subsection (5) may also provide that anything which may be done under regulations under subsection (6)(c) to (e) or (9) may be done notwithstanding any rule of common law which prohibits or restricts the disclosure of information.
Regulations under subsections (1)(a) and (5) may only be made with the consent of the Secretary of State.
Any person or body establishing or operating a database under this section must in the establishment or operation of the database have regard to any guidance, and comply with any direction, given to that person by the Assembly.
Guidance or directions under subsection (13) may in particular relate to—
In this section, "the data protection legislation" has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).