Section 107 makes provision concerning the procedure for making regulations under the powers in the UK GDPR, including consultation requirements. It makes it clear that, before making regulations, the Secretary of State must consult the Commissioner and such other persons as they consider appropriate, save for some exceptions. Those other appropriate persons will depend on the nature of the regulations in question, but an example would be where the regulations touch on healthcare matters and/or the processing of patient data. In such a case, the Secretary of State might consider it appropriate to consult, for example, the National Data Guardian for Health and Care, relevant healthcare bodies and relevant medical associations.
Part 5: Data Protection and Privacy Miscellaneous Section 107: Regulations under the UK GDPR