(1) Subject to the Data Protection Regulation and the Data Protection Act 2018, the Executive may, in accordance with this section, access and process any relevant records for the purposes of this Act.

(2) Subject to subsection (3), the Executive shall, as soon as is practicable after the commencement of this section, prepare and cause to be published a code of practice to be complied with by a person accessing and processing any relevant records pursuant to subsection (1), or a person referred to in subsection (4) having any relevant information in the person's possession, custody or control, in so far as the relevant records or relevant information, as the case may be, consist of personal data.

(2A) Subject to subsection (3A), the Executive shall, as soon as practicable after the coming into operation of section 25 of the Act of 2021, and from time to time thereafter where it considers it appropriate to do so, prepare and publish a revised code of practice for the purposes referred to in subsection (2).