A direct access agreement must specify—a) the particular information in relation to licence holders that may be accessed:b) the particular purpose or purposes for which the information may be accessed:c) the particular function, duty, or power being, or to be, performed or exercised by the accessing agency for which the information is required:d) the mechanism by which the information is to be accessed:e) the position or designation of the person or persons in the accessing agency who may access the information:f) the records to be kept in relation to each occasion on which the registry is accessed:g) the safeguards that are to be applied for protecting information:h) the requirements relating to storage and disposal of information obtained from the registry:i) that the accessing agency may use the information only in accordance with the purposes for which it was accessed:j) the requirements for reviewing the agreement:k) the requirement to regularly audit access to the registry.
History: Section 38ZF: inserted, on 24 June 2023, by section 63 of the Arms Legislation Act 2020 (2020 No 23).