1.The supervisory body may give information and assistance to, and otherwise co-operate with, a [F2public authority in the EU] [F2designated overseas authority] if the supervisory body considers that to do so would be in the interests of effective regulation or supervision of trust services (whether inside or outside the United Kingdom).
2.Nothing in paragraph 1 authorises the processing of personal data other than in accordance with the data protection legislation.
In this paragraph, “processing”, “personal data” and “the data protection legislation” have the meanings given by section 3 of the Data Protection Act 2018.
[F33.In this Article—
“designated” means designated by regulations made by the Secretary of State that are in force;
“overseas authority” means a person, or description of person, with functions relating to the regulation or supervision of trust services outside the United Kingdom.
4.Before making regulations under this Article, the Secretary of State must consult the supervisory body.
5.Regulations under this Article may include transitional or transitory provision or savings.
6.Regulations under this Article are to be made by statutory instrument.
7.A statutory instrument containing regulations under this Article is subject to annulment in pursuance of either House of Parliament.]]
Textual Amendments
F1Art. 18 substituted (31.12.2020) by virtue of The Electronic Identification and Trust Services for Electronic Transactions (Amendment etc.) (EU Exit) Regulations 2019 (S.I. 2019/89), reg. 1(2), Sch. para. 13; 2020 c. 1, Sch. 5 para. 1(1)
F2Words in Art. 18(1) substituted (19.6.2025 for specified purposes) by Data (Use and Access) Act 2025 (c. 18), ss. 133(3), 142(1)(2)(h)
F3Art. 18(3)-(7) inserted (19.6.2025 for specified purposes) by Data (Use and Access) Act 2025 (c. 18), ss. 133(5), 142(1)(2)(h)