I think "statutory regulation" just means there has to be a law allowing it ("statute" meaning law). From reading their website the other day, I got the impress

I think "statutory regulation" just means there has to be a law allowing it ("statute" meaning law). From reading their website the other day, I got the impression that the case they had in mind was certain laws about containing contagious diseases, which could override privacy laws. Reading on Wikipedia, "Statutary orders" and "statuatory instruments" seems to be particular ways of delegating law-making power from parliament. I don't think they are directly relevant here (since there has to be some enabling legislation)? But the section 251 thing already allows the Secretary of State for Health to disclose data, so if you are worried about ministers operating without parliamentary oversight, that is indeed possible....