Subject to paragraphs 2 to 6, a person holds and vacates the office of Data Guardian in accordance with the terms of his or her appointment.

The period for which a person is appointed as the Data Guardian must not exceed three years.

A person who has held office as the Data Guardian may be re-appointed once only.

The Data Guardian may at any time resign the office by giving notice in writing to the Secretary of State.

The Secretary of State may remove the Data Guardian from office if satisfied that he or she is unable, unwilling or unfit to perform the functions of the Data Guardian.

Service as the Data Guardian is not service in the civil service of the State.

The Secretary of State may pay to or in respect of the Data Guardian such remuneration, expenses, pensions, allowances or compensation for loss of office as the Secretary of State may determine.

The Data Guardian may appoint staff and advisors as the Data Guardian may determine.

Service as a member of staff of or advisor to the Data Guardian is not service in the civil service of the State.

The Data Guardian may authorise a member of his or her staff to do anything required or authorised to be done by the Data Guardian.

The Data Guardian may make arrangements for persons to be seconded to serve as members of his or her staff.

The arrangements may include provision for payments by the Data Guardian to the person with whom the arrangements are made or directly to seconded staff (or both).

A period of secondment does not affect the continuity of a person's employment with the employer from whose service he or she is seconded and, in particular, does not affect such a person's continuity of service in the civil service of the State.

The Secretary of State must pay to the Data Guardian such sums as the Secretary of State considers appropriate for the purpose of enabling the Data Guardian to perform his or her functions.

The Data Guardian must keep proper accounts and proper records in relation to accounts.

The Data Guardian must send a copy of the annual report to the Secretary of State before the end of June next following the financial year to which the statement of accounts relates.

The Secretary of State must lay a copy of the annual report before Parliament.

In Part 2 of the table in paragraph 3 of Schedule 1 to the Public Records Act 1958 (definition of public records) insert at the appropriate place— “ The National Data Guardian for Health and Social Care. ”

In Schedule 2 to the Parliamentary Commissioner Act 1967 (departments etc subject to investigation) insert at the appropriate place— “ The National Data Guardian for Health and Social Care. ”

In Part 3 of Schedule 1 to the House of Commons Disqualification Act 1975 (other disqualifying offices) insert at the appropriate place— “ National Data Guardian for Health and Social Care. ”

In Part 6 of Schedule 1 to the Freedom of Information Act 2000 (public authorities to which that Act applies) insert at the appropriate place— “ The National Data Guardian for Health and Social Care. ”

In Part 1 of Schedule 19 to the Equality Act 2010 (public authorities to which the public sector equality duty applies), under the heading “Health, social care and social security”, after the entry relating to the Health and Social Care Information Centre insert— “ The National Data Guardian for Health and Social Care. ”