Mr. Dale Sunderland:

It would be preferable that the purpose is specified clearly in the primary legislation and perhaps the modalities of how it is done could be included in the code of practice, which is a statutory code of practice and has legal effect as well. The two together can provide the overall framework for providing the avenue for the collection of the data but done in a data protection-compliant way.