Member

The clauses already make it explicit that any organisation subject to the duty must comply fully with data protection legislation. This includes the principles of lawfulness, fairness, transparency, and accountability. As such, this amendment would simply duplicate existing legal requirements, which are already robust and well established. I take the point about what happens at the age of 18. Of course, as the noble Baroness, Lady Cash, identified, if the consistent identifier is the NHS number, that obviously would continue into adulthood. I assure the noble Baroness that we have thought through the implications of what would happen if it were not the NHS number as well.