Privacy and Data Protection Act 2014

The Information Commissioner must send a report issued under section 48 and a copy of any certificate issued under section 49 in relation to an information usage arrangement to—

the responsible Minister for each organisation that is a party to the arrangement; and

if the arrangement authorises the handling of personal information for the purposes of an information handling provision, the responsible Minister for that provision.

After receiving the report and a certificate from the Information Commissioner, the information usage arrangement may be approved—

in the case of a single party, by the responsible Minister for the lead party; or

otherwise, by agreement of the responsible Ministers for each organisation that is a party to the arrangement.

An information usage arrangement cannot be approved under this section unless the Information Commissioner has issued a certificate in relation to the arrangement.

Subject to subsection (5), the Information Commissioner must cause an approved information usage arrangement to be published on the Internet site of the Information Commissioner.

The Information Commissioner is not required to publish any part of an approved information usage arrangement that would disclose—

personal information; or

information that, if contained in a document, would make that document an exempt document under section 29(b), 29A, 31, 31A or 34 of the Freedom of Information Act 1982.