My Lords, I am grateful to the noble Lord, Lord Clement-Jones, for giving the House the opportunity to talk about this issue again. He has been deeply involved in this topic and, as he said, I spoke on it in Committee. Compliance with this country’s very robust data protection rules is critical in general and particularly important in healthcare. This was discussed in the debate instigated by the noble Lord, Lord Freyberg; it has been a topic of conversation in this House, both in and out of the Chamber, on many occasions.
The noble Lord talked about the number of bodies that have some responsibility: he called it balkanised. It is important that we do not create a balkanisation in the law, even if a small one is in operation. One set of law should take precedence over all data protection, security and connected issues. That is, and should be, the Data Protection Act 2018. This means that there are operational guidelines, frameworks, principles and so on about how these ought to operate within individual contexts. That is precisely where the Caldicott principles come in. They take a general piece of legislation and translate what good practice in interpreting it ought to mean in a health setting. In that sense, it is important to say that we should not put those principles in a legislative setting. They are interpretive of the core, primary legislation and may need to change over time. They may need to adapt; there may be an eighth principle as we get into interesting questions about the value of data and so on.
It is important to recognise that the Caldicott principles bring to life what the Data Protection Act ought to mean in health settings. It would be a mistake to create competing law. Of course the Government agree with the noble Lord about the importance of giving force to the principles. That is one reason why we supported the Private Member’s Bill brought into this House by
my noble friend Lady Chisholm to put the national data guardian on a statutory basis. I hope that that gives him the strength of reassurance about the way that the framework is constructed, which is not to create an opportunity to do funny stuff at the edges, but rather to make sure that there is primacy of one set of legislation.
5.15 pm