Subsections (1) and (2) of section 19 require (subject to the exceptions in subsection (8)) the Secretary of State and the Treasury ("the relevant person"), by regulations, to provide for review of provisions made by them in other Part 1 regulations ("Part 1 provision").
	Under subsection (3), the regulations must require review of the Part 1 provision in question, followed by publication of a report setting out the findings of that review and the laying of a copy of the report before Parliament. The intention is to give Parliament ongoing oversight of Smart Data schemes after they are introduced.
	Under subsection (4), the regulations must require the first report to be published within five years of the of the Part 1 provision coming into force and the publication of subsequent reports at intervals of no more than five years, the intention being that Smart Data schemes are reviewed at least once every five years.
	Subsection (5) deals with the criteria against which the regulations must require the review to be conducted. In all cases, the regulations must require the relevant person to consider whether the Part 1 provision in question remains appropriate. That must be assessed having regard to whether the provision continues to achieve the objectives it is intended to be achieved but may also be assessed having regard to other matters. Where that provision is part of data regulations, the review must have regard to the matters to which the regulation-maker was required to have regard in sections 2(5) and 4(5).
	Subsection (6) requires the regulations to provide that the published report omits material that the relevant person thinks might harm a person’s commercial interests.
	Subsection (7) allows the regulations to provide for a joint review and report in respect of Part 1 provisions made respectively by the Secretary of State and the Treasury.
	Subsection (8)(a) and (b) is intended to disapply the review requirement in relation to regulations which amend Part 1 regulations ("substantive regulations") to which the review provision already applies, the intention being that provisions inserted (or otherwise modified) in the substantive regulations will be reviewed in accordance with the existing review requirements and timetable of the substantive regulations. Subsection (8) also ensures that the relevant person is not required to review revoked provisions.
	Subsection (9) disapplies the review requirements in section 28 of the Small Business, Enterprise and Employment Act 2015 to avoid multiple review requirements.
Part 1: Access to Customer Data and Business Data Supplementary Section 19: Duty to review regulations