Under the Health Service (Control of Patient Information) Regulations 2002, confidential patient information may be processed for medical purposes in certain circumstances, provided that the processing has been approved by the Secretary of State for Health.
In the case of medical research, the processing must also be approved by a REC.
The 2002 Regulations were originally made under Section 60 of the Health and Social Care Act 2001, and continue in force under Section 251 of the National Health Service Act 2006. Approvals under the Regulations are referred to as ‘Section 251 approval’