NHS England must publish guidance for registered persons on the practice to be followed by them in relation to the processing of—
patient information, and
any other information obtained or generated in the course of the provision of the health service.
Registered persons who carry on an activity which involves, or is connected with, the provision of health care must have regard to any guidance published under this section.
In this section, "patient information", "processing" and "registered person" have the same meaning as in section 20A of the Health and Social Care Act 2008.