Regulation 9 Confidential health information
Where an authorised person is in possession of confidential health information which has been obtained for the purposes of a joint inspection, that person shall–
(a)
not allow any other person access to that information, other than a person who, by virtue of a contract of employment or otherwise, is involved in using or disclosing that information for one or more of those purposes for which the information may be used or disclosed;
(b)
ensure that appropriate technical and organisational measures are taken to prevent unauthorised use or disclosure of that information; and
(c)
on request by any person or body, make available information on the steps taken to comply with this regulation.