# Local Audit and Accountability Act 2014, Paragraph 3

Extent: E+W

(1) If a relevant minister thinks it appropriate to conduct a data matching exercise using data held by or on behalf of a body or person in England, the data may be disclosed to the minister or a person acting on the minister's behalf.
(2) Sub-paragraph (1) applies to the disclosure of data by a relevant authority, a best value authority or an NHS foundation trust otherwise than in response to a requirement under paragraph 2 as it applies to other disclosures of data.
(3) Sub-paragraph (1) does not authorise—
(a) a disclosure which contravenes the data protection legislation, or
(b) a disclosure prohibited by any of Parts 1 to 7 or Chapter 1 of Part 9 of the Investigatory Powers Act 2016 .
(3A) “The data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).
(4) Data may not be disclosed under sub-paragraph (1) if the data comprises or includes patient data.
(5) “Patient data” means data relating to an individual which are held for medical purposes (within the meaning of section 251 of the National Health Service Act 2006) and from which the individual can be identified.
(6) A disclosure under sub-paragraph (1) does not breach—
(a) any obligation of confidence owed by a person making the disclosure, or
(b) any other restriction on the disclosure of information (however imposed).
(7) This paragraph does not limit the circumstances in which data may be disclosed apart from this paragraph.
(8) Data matching exercises may include data provided by a body or person outside England.

---
Source: https://www.legislation.gov.uk/ukpga/2014/2/schedule/9/paragraph/3 (the official version)
Page: https://openlegislation.uk/local-audit-and-accountability-act-2014/schedule-9/paragraph-3
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.