17. (1) A relevant body shall disclose relevant data to the Garda Síochána in accordance with this Part.

(2) A relevant body shall, for the purposes of this Part, enter into a data sharing agreement in writing with the Commissioner of the Garda Síochána, which shall—

(a) specify the relevant data, or categories of relevant data, to be disclosed and the general purposes of that disclosure,

(b) specify the security measures to apply to the transmission, storage and accessing of relevant data, in a manner that does not compromise those security measures,

(c) specify the requirements in relation to the retention of the relevant data to be disclosed for the duration of the agreement and in the event that the agreement is terminated,

(d) specify the method to be employed to destroy or delete the relevant data to be disclosed at the end of the period for which the relevant data is to be retained in accordance with the agreement,

(e) specify the procedure in accordance with which a party may withdraw from the agreement, and

(f) specify any such other matters as considered appropriate by both parties to the agreement.

(3) The relevant body and the Commissioner of the Garda Síochána who are parties to a data sharing agreement under subsection (2) shall review the operation of the agreement on a regular basis, with the initial review being carried out on a date that is not more than 3 years from the date the agreement came into effect and in the case of each subsequent review under this subsection, on a date that is not more than 3 years from the date of the previous review under this subsection.