The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019

Chapter 4 (controller and processor)

22.—(1) Article 28 is amended as follows.

(2) In paragraph 3—

(a) in the opening words, for “Union or Member State law” substitute “domestic law”;

(b) in point (a), for “Union or Member State law to which the processor is subject” substitute “domestic law”;

(c) in point (g), for “Union or Member State law” substitute “domestic law”;

(d) in the second subparagraph, for “other Union or Member State data protection provisions” substitute “other domestic law relating to data protection”.

(3) In paragraph 4, “for Union or Member State law” substitute “domestic law”.

(4) In paragraph 6, for “paragraphs 7 and 8” substitute “paragraph 8”.

(5) Omit paragraph 7.

(6) In paragraph 8—

(a) for “A supervisory authority” substitute “The Commissioner”;

(b) omit “and in accordance with the consistency mechanism referred to in Article 63”.