s arrangements for protecting information. The 1998 Act requires that data subjects are provided with 'fair processing information'. This consists of information on who holds the data, to whom it will be disclosed, how long it will be held for, what it will be used for, and any other information which may be relevant. 2.60. Where a parent lacks the capacity to give consent to disclosure of health information about themselves or the child, reference should be made to the code of practice issued under the Mental Capacity Act 2005. 2.61. In planning arrangements for accessing and disclosing health information, the agency should consult its medical and legal advisers in advance, as they can help to ensure the agency's policies and procedures accord with the 1998 Act and the medical profession's ethical guidelines and practice. The agency should also ensure that it complies with the NHS Confidentiality Code of Practice, which is based on the common law of confidentiality, the 1998 Act, and other areas of law surrounding confidentiality. Child’s permanence report: AAR 17 2.62. The CPR is prepared where the agency considers, in the light of all the information it has gathered, that adoption is the preferred option for the child’s permanence. The social worker who knows the child best should compile the CPR provided they meet the requirements of the Restriction on the Preparation of Adoption Reports Regulations 2005 (ARR). Guidance about the ARR is given in chapter 1. 2.63. The CPR must include all the information about the child and their family and a summary by the agency’s medical adviser on the state of the child’s current physical and mental health and behaviour and, if age appropriate, a developmental assessment, their health history and current and future heath care need