38. (1) A base registry owner shall—

(a) take all reasonable steps to ensure that the information contained in the base registry is—

(i) accurate,

(ii) up to date, and

(iii) a complete record of the information specified in the order made under section 37(1) relating to the base registry,

(b) ensure that the information contained in the base registry may be accessed by a public body which requires access to that information for the purpose of the performance of a function of the public body,

(c) put in place appropriate administrative and technical measures to control and monitor access to the base registry,

(d) publish a description of the measures referred to in paragraph (c) on the website maintained by it, and

(e) where the information contained in the base registry includes personal data, be the lead agency in respect of the data-sharing agreement relating to the disclosure of the information to public bodies accessing the information on the base registry.

(2) In this section and sections 39 to 42, a reference to a base registry is a reference to the base registry in respect of which the base registry owner concerned has been specified as such in an order made under section 37(1).