Search Legislation

Advanced Search

The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019

Changes to legislation:

There are currently no known outstanding effects for the The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019. Help about Changes to Legislation

Close

Changes to Legislation

Revised legislation carried on this site may not be fully up to date. At the current time any known changes or effects made by subsequent legislation have been applied to the text of the legislation you are viewing by the editorial team. Please see ‘Frequently Asked Questions’ for details regarding the timescales for which new effects are identified and recorded on this site.

  1. Introductory Text

  2. 1.Citation, commencement and extent

  3. 2.Interpretation

  4. 3.Amendment of the UK GDPR

  5. 4.Amendment of the Data Protection Act 2018

  6. 5.GDPR merger modifications

  7. 6.Consequential amendments of other legislation

  8. 7.Amendments consequential on provisions of the 2018 Act

  9. 8.Amendment of the Privacy and Electronic Communications Regulations 2003

  10. Signature

    1. SCHEDULE 1

      Amendments of the UK GDPR

      1. 1.Introduction

      2. 2.In the title of the Regulation, for “, and repealing...

      3. 3.Chapter 1 (general provisions)

      4. 4.(1) Article 2 is amended as follows.

      5. 5.(1) Article 3 is amended as follows.

      6. 6.(1) Article 4 is amended as follows.

      7. 7.Chapter 2 (principles)

      8. 8.(1) Article 8 is amended as follows.

      9. 9.(1) Article 9 is amended as follows.

      10. 10.(1) Article 10 is amended as follows.

      11. 11.Chapter 3 (rights of the data subject)

      12. 12.(1) Article 13 is amended as follows.

      13. 13.(1) Article 14 is amended as follows.

      14. 14.In Article 15(1)(f), for “a supervisory authority” substitute “ the...

      15. 15.(1) Article 17 is amended as follows.

      16. 16.In Article 18(2), omit “of the Union or of a...

      17. 17.In Article 21(5)— (a) omit “and notwithstanding Directive 2002/58/EC ,”;...

      18. 18.(1) Article 22 is amended as follows.

      19. 19.(1) Article 23 is amended as follows.

      20. 20.Chapter 4 (controller and processor)

      21. 21.(1) Article 27 is amended as follows.

      22. 22.(1) Article 28 is amended as follows.

      23. 23.In Article 29, for “Union or Member State law” substitute...

      24. 24.(1) Article 30 is amended as follows.

      25. 25.(1) Article 31 is amended as follows.

      26. 26.In Article 32(4), for “Union or Member State law” substitute...

      27. 27.(1) Article 33 is amended as follows.

      28. 28.In Article 34(4), for “the supervisory authority” substitute “ the...

      29. 29.(1) Article 35 is amended as follows.

      30. 30.(1) Article 36 is amended as follows.

      31. 31.(1) Article 37 is amended as follows.

      32. 32.In Article 38(5), for “Union or Member State law” substitute...

      33. 33.(1) Article 39 is amended as follows.

      34. 34.(1) Article 40 is amended as follows.

      35. 35.(1) Article 41 is amended as follows.

      36. 36.(1) Article 42 is amended as follows.

      37. 37.(1) Article 43 is amended as follows.

      38. 38.Chapter 5 (transfers of personal data to third countries or international organisations)

      39. 39.(1) Article 46 is amended as follows.

      40. 40.(1) Article 47 is amended as follows.

      41. 41.Omit Article 48.

      42. 42.(1) Article 49 is amended as follows.

      43. 43.In Article 50, for “the Commission and supervisory authorities” substitute...

      44. 44.Chapter 6 (independent supervisory authorities)

      45. 45.(1) Article 51 is amended as follows.

      46. 46.(1) Article 52 is amended as follows.

      47. 47.Omit Article 53.

      48. 48.Omit Article 54.

      49. 49.In the heading of section 2 of Chapter 6, for...

      50. 50.Omit Article 55.

      51. 51.Omit Article 56.

      52. 52.(1) Article 57 is amended as follows.

      53. 53.(1) Article 58 is amended as follows.

      54. 54.In Article 59— (a) for “Each supervisory authority” substitute “...

      55. 55.Chapter 7 (cooperation and consistency)

      56. 56.Chapter 8 (remedies, liability and penalties)

      57. 57.(1) Article 78 is amended as follows.

      58. 58.(1) Article 79 is amended as follows.

      59. 59.(1) Article 80 is amended as follows.

      60. 60.Omit Article 81.

      61. 61.In Article 82, omit paragraph 6.

      62. 62.(1) Article 83 is amended as follows.

      63. 63.In Article 84, for paragraphs 1 and 2 substitute— Part...

      64. 64.Chapter 9 (provisions relating to specific processing situations)

      65. 65.(1) Article 86 is amended as follows.

      66. 66.After Article 86 insert— Article 86A Processing and national security...

      67. 67.Omit Article 87.

      68. 68.Omit Article 88.

      69. 69.(1) Article 89 is amended as follows.

      70. 70.Omit Article 90.

      71. 71.Omit Article 91.

      72. 72.Chapter 10 (delegated acts and implementing acts)

      73. 73.Chapter 11 (final provisions)

      74. 74.(1) Article 95 is amended as follows.

      75. 75.(1) Article 96 is amended as follows.

      76. 76.Omit Article 97.

      77. 77.Omit Article 98.

      78. 78.Omit Article 99.

      79. 79.Omit the sentence following Article 99.

      80. 80.Supplementary

    2. SCHEDULE 2

      Amendments of the Data Protection Act 2018

      1. 1.Introduction

      2. 2.Part 1 (preliminary)

      3. 3.In section 2(1) and (2), for “GDPR, the applied GDPR”...

      4. 4.(1) Section 3 is amended as follows.

      5. 5.Part 2 (general processing) (other than Schedules 1 to 6)

      6. 6.(1) Section 5 is amended as follows.

      7. 7.For the heading of Chapter 2 substitute “ The UK...

      8. 8.In the italic heading before section 6, for “GDPR” substitute...

      9. 9.In section 6(1) and (2), for “GDPR” substitute “ UK...

      10. 10.(1) Section 7 is amended as follows.

      11. 11.In section 8, for “GDPR” substitute “ UK GDPR ”....

      12. 12.Omit section 9.

      13. 13.(1) Section 10 is amended as follows.

      14. 14.In section 11, in subsection (1) (in both places) and...

      15. 15.In section 12(1)(a) and (b), for “GDPR” substitute “ UK...

      16. 16.In section 13(2) and (3), for “GDPR” substitute “ UK...

      17. 17.(1) Section 14 is amended as follows.

      18. 18.For the italic heading before section 15 substitute “ Exemptions...

      19. 19.(1) Section 15 is amended as follows.

      20. 20.(1) Section 16 is amended as follows.

      21. 21.For the italic heading before section 17 substitute “ Certification...

      22. 22.(1) Section 17 is amended as follows.

      23. 23.Before section 18 (but after the italic heading before it)...

      24. 24.(1) Section 18 is amended as follows.

      25. 25.In section 19(2), for “GDPR” substitute “ UK GDPR ”....

      26. 26.In section 20— (a) for “this Chapter” (in both places)...

      27. 27.For the heading of Chapter 3 substitute “ Exemptions for...

      28. 28.For the italic heading before section 21 substitute “ Definitions...

      29. 29.(1) Section 21 is amended as follows.

      30. 30.Omit section 22 and the italic heading before it.

      31. 31.Omit section 23.

      32. 32.(1) Section 24 is amended as follows.

      33. 33.(1) Section 25 is amended as follows.

      34. 34.(1) Section 26 is amended as follows.

      35. 35.In section 27(5), for “the applied GDPR” substitute “ the...

      36. 36.(1) Section 28 is amended as follows.

      37. 37.Part 3 (law enforcement processing) (other than Schedules 7 and 8)

      38. 38.In section 48, omit subsection (8).

      39. 39.In section 67, omit subsection (8).

      40. 40.(1) Section 73 is amended as follows.

      41. 41.Omit section 74.

      42. 42.After section 74 insert— Transfers based on adequacy regulations (1) The Secretary of State may by regulations specify any...

      43. 43.In section 76(1)(c), omit “a member State or”.

      44. 44.Section 77(8), for “member States” substitute “ the United Kingdom...

      45. 45.(1) Section 78 is amended as follows.

      46. 46.(1) Section 80 is amended as follows.

      47. 47.Part 5 (Information Commissioner) (other than Schedules 12 to 14)

      48. 48.(1) Section 116 is amended as follows.

      49. 49.(1) Section 117 is amended as follows.

      50. 50.(1) Section 118 is amended as follows.

      51. 51.After section 119 insert— Standard clauses for transfers to third...

      52. 52.(1) Section 120 is amended as follows.

      53. 53.In section 123(7), for “GDPR” (in both places) substitute “...

      54. 54.In section 129(1), for “GDPR” substitute “ UK GDPR ”....

      55. 55.In section 132(2), omit paragraph (d).

      56. 56.In section 135(4), for “GDPR” substitute “ UK GDPR ”....

      57. 57.In section 136(1)(b), for “GDPR” substitute “ UK GDPR ”....

      58. 58.In section 139(2), for “GDPR” substitute “ UK GDPR ”....

      59. 59.Part 6 (enforcement) (other than Schedules 15 to 17)

      60. 60.In section 143(9), for “GDPR” substitute “ UK GDPR ”....

      61. 61.In section 149(2)(a), (b), (c) and (e), (3) and (4)(b)...

      62. 62.In section 151(1)(b) and (8)(a), for “GDPR” substitute “ UK...

      63. 63.In section 155(2)(a), for “GDPR” (in both places) substitute “...

      64. 64.(1) Section 157 is amended as follows.

      65. 65.In section 159(1) and (2), for “GDPR” substitute “ UK...

      66. 66.(1) Section 165 is amended as follows.

      67. 67.In section 166(1), for “GDPR” substitute “ UK GDPR ”....

      68. 68.In section 167(4), for “GDPR” substitute “ UK GDPR ”....

      69. 69.(1) Section 168 is amended as follows.

      70. 70.In section 169(1), for “GDPR” substitute “ UK GDPR ”....

      71. 71.In section 170(7), for “GDPR” substitute “ UK GDPR ”....

      72. 72.In section 171(8)(a), for “GDPR” substitute “ UK GDPR ”....

      73. 73.In section 173(2)(a) and (b), for “GDPR” substitute “ UK...

      74. 74.In section 174(2)(a) and (b), for “GDPR” substitute “ UK...

      75. 75.In section 180(2)(d) and (e), for “GDPR” substitute “ UK...

      76. 76.In section 181, in the definition of “representative”, for “GDPR”...

      77. 77.Part 7 (supplementary and final provision) (other than Schedules 18 to 20)

      78. 78.(1) Section 183 is amended as follows.

      79. 79.In section 185(4)(a) and (b), for “GDPR” substitute “ UK...

      80. 80.(1) Section 186 is amended as follows.

      81. 81.(1) Section 187 is amended as follows.

      82. 82.In section 188(2), for “GDPR” substitute “ UK GDPR ”....

      83. 83.(1) Section 189 is amended as follows.

      84. 84.In section 190(1), for “GDPR” (in each place) substitute “...

      85. 85.(1) Section 205 is amended as follows.

      86. 86.(1) The Table in section 206 is amended as follows....

      87. 87.(1) Section 207 is amended as follows.

      88. 88.In section 209(2), (3) and (4), for “GDPR” substitute “...

      89. 89.In section 210(2) and (3), for “GDPR” substitute “ UK...

      90. 90.(1) Section 213 is amended as follows.

      91. 91.Schedules

      92. 92.(1) Schedule 2 is amended as follows.

      93. 93.(1) Schedule 3 is amended as follows.

      94. 94.(1) Schedule 4 is amended as follows.

      95. 95.In Schedule 5, in the following provisions, for “national accreditation...

      96. 96.Omit Schedule 6.

      97. 97.(1) Schedule 13 is amended as follows.

      98. 98.In Schedule 14, omit Part 1.

      99. 99.(1) Schedule 18 is amended as follows.

      100. 100.(1) Schedule 19 is amended as follows.

      101. 101.(1) Schedule 20 is amended as follows.

      102. 102.After Schedule 20 insert— SCHEDULE 21 Further transitional provision etc Section...

    3. SCHEDULE 3

      Consequential amendments of other legislation

      1. PART 1 Revocation of retained EU law

        1. 1.Revocation of Regulations and Decisions

        2. 2.Revocation of provisions of EEA agreement

      2. PART 2 Amendments of primary legislation

        1. 3.Consumer Credit Act 1974

        2. 4.In section 157(2A)(a) (duty to disclose name etc of agency),...

        3. 5.In section 159(1)(a) (correction of wrong information), for “GDPR” substitute...

        4. 6.In section 189(1) (definitions)— (a) omit the definition of “the...

        5. 7.Pharmacy (Northern Ireland) Order 1976

        6. 8.Medical Act 1983

        7. 9.(1) Section 29E (evidence) is amended as follows.

        8. 10.(1) Section 35A (General Medical Council's power to require disclosure...

        9. 11.In section 55(1) (interpretation), at the appropriate place insert— “the...

        10. 12.In paragraph 9B of Schedule 1 (incidental powers of the...

        11. 13.In paragraph 5A of Schedule 4 (professional performance assessments and...

        12. 14.Dentists Act 1984

        13. 15.(1) Section 33B (the General Dental Council's power to require...

        14. 16.(1) Section 36Y (the General Dental Council's power to require...

        15. 17.In section 53(1) (interpretation), at the appropriate place insert— “the...

        16. 18.Opticians Act 1989

        17. 19.Immigration and Asylum Act 1999

        18. 20.Freedom of Information Act 2000

        19. 21.Health and Personal Social Services Act (Northern Ireland) 2001

        20. 22.Freedom of Information (Scotland) Act 2002

        21. 23.Mental Health (Care and Treatment) (Scotland) Act 2003

        22. 24.Crime and Courts Act 2013

        23. 25.Small Business, Enterprise and Employment Act 2015

        24. 26.Social Security (Scotland) Act 2018

      3. PART 3 Amendments of other legislation

        1. 27.Channel Tunnel (International Arrangements) Order 1993

        2. 28.Channel Tunnel (Miscellaneous Provisions) Order 1994

        3. 29.Scottish Parliamentary Corporate Body (Crown Status) Order 1999

        4. 30.Northern Ireland Assembly Commission (Crown Status) Order 1999

        5. 31.Representation of the People (England and Wales) Regulations 2001

        6. 32.(1) Regulation 3(1) (interpretation) is amended as follows.

        7. 33.In regulation 92(2)(ba) (interpretation and application of Part VI etc),...

        8. 34.Representation of the People (Scotland) Regulations 2001

        9. 35.(1) Regulation 3(1) (interpretation) is amended as follows.

        10. 36.In regulation 92(2)(ba) (interpretation of Part VI etc), for “the...

        11. 37.Financial Services and Markets Act 2000 (Disclosure of Confidential Information) Regulations 2001

        12. 38.Nursing and Midwifery Order 2001

        13. 39.(1) Article 3 (the Nursing and Midwifery Council and its...

        14. 40.(1) Article 25 (the Council's power to require disclosure of...

        15. 41.In article 40(6) (Directive 2005/36/EC: designation of competent authority etc),...

        16. 42.In Schedule 4 (interpretation), at the appropriate place insert— “the...

        17. 43.Electronic Commerce (EC Directive) Regulations 2002

        18. 44.Privacy and Electronic Communications (EC Directive) Regulations 2003

        19. 45.Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003

        20. 46.(1) Article 8 (exercise of powers by French officers in...

        21. 47.(1) Article 11 (exercise of powers by UK immigration officers...

        22. 48.Pupils' Educational Records (Scotland) Regulations 2003

        23. 49.In regulation 2 (interpretation)— (a) omit the definition of “the...

        24. 50.In regulation 6(aa) and (ab) (circumstances where information should not...

        25. 51.In regulation 9(1A) (in both places) and (1B), for “GDPR”...

        26. 52.Environmental Information Regulations 2004

        27. 53.(1) Regulation 2 (interpretation) is amended as follows.

        28. 54.In regulation 13 (personal data), in paragraphs (2B)(a), (3A)(a), (5B)(b)...

        29. 55.Environmental Information (Scotland) Regulations 2004

        30. 56.(1) Regulation 2 (interpretation) is amended as follows.

        31. 57.In regulation 11 (personal data), in paragraphs (3B), (4A)(a) and...

        32. 58.Licensing Act 2003 (Personal Licences) Regulations 2005

        33. 59.Education (Pupil Information) (England) Regulations 2005

        34. 60.Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005

        35. 61.Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005

        36. 62.Register of Judgments, Orders and Fines Regulations 2005

        37. 63.National Assembly for Wales (Representation of the People) Order 2007

        38. 64.National Assembly for Wales Commission (Crown Status) Order 2007

        39. 65.Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007

        40. 66.Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007

        41. 67.Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007

        42. 68.In regulation 2 (interpretation)— (a) omit the definition of “the...

        43. 69.In regulation 10(2) (duties of Boards of Governors), for “GDPR”...

        44. 70.Representation of the People (Northern Ireland) Regulations 2008

        45. 71.Controlled Drugs (Supervision of Management and Use) (Wales) Regulations 2008

        46. 72.(1) Regulation 2(1) (interpretation) is amended as follows.

        47. 73.In regulation 25(7) (duty to co-operate by disclosing information as...

        48. 74.In regulation 26(6) (responsible bodies requesting additional information be disclosed...

        49. 75.In regulation 29(3) (occurrence reports) — (a) in the English...

        50. 76.Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008

        51. 77.INSPIRE Regulations 2009

        52. 78.INSPIRE (Scotland) Regulations 2009

        53. 79.Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009

        54. 80.In regulation 2(2) (interpretation)— (a) omit the words from “...

        55. 81.In regulation 25(7) (duty to co-operate by disclosing information as...

        56. 82.In regulation 26(6) (responsible bodies requesting additional information be disclosed...

        57. 83.In regulation 29(3) (occurrence reports), for “GDPR” substitute “ UK...

        58. 84.Pharmacy Order 2010

        59. 85.In article 3(1) (interpretation), at the appropriate place insert— “the...

        60. 86.In article 9(5) (inspection and enforcement), for “and references to...

        61. 87.(1) Article 49 (disclosure of information: general) is amended as...

        62. 88.(1) Article 55 (professional performance assessments) is amended as follows....

        63. 89.Local Elections (Northern Ireland) Order 2010

        64. 90.Pupil Information (Wales) Regulations 2011

        65. 91.(1) In paragraph (5)(a) and (b) —

        66. 92.Police and Crime Commissioner Elections Order 2012

        67. 93.(1) Schedule 2 (absent voting in Police and Crime Commissioner...

        68. 94.(1) Schedule 10 (access to marked registers and other documents...

        69. 95.Neighbourhood Planning (Referendums) Regulations 2012

        70. 96.Controlled Drugs (Supervision of Management and Use) Regulations 2013

        71. 97.Small and Medium Sized Business (Credit Information) Regulations 2015

        72. 98.Scottish Parliament (Elections etc) Order 2015

        73. 99.(1) Schedule 3 (absent voting) is amended as follows.

        74. 100.In Schedule 8 (access to marked registers and other documents...

        75. 101.Electronic Identification and Trust Services for Electronic Transactions Regulations 2016

        76. 102.Court Files Privileged Access Rules (Northern Ireland) 2016

        77. 103.In rule 2 (interpretation), at the appropriate place insert— “the...

        78. 104.In rule 5(a) (information that may be released), for “GDPR”...

        79. 105.In rule 7(2)(a) (provision of information), for “GDPR” substitute “...

        80. 106.Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017

        81. 107.In regulation 3(1) (interpretation)— (a) omit the words from “...

        82. 108.In regulation 16(8)(b) (risk assessment by the Treasury and Home...

        83. 109.In regulation 17(9)(b) (risk assessment by supervisory authorities), for “GDPR”...

        84. 110.In regulation 41 (data protection), in paragraphs (3)(a), (6), (7),...

      4. PART 4 Modification

        1. 111.References to the GDPR

      5. PART 5 Supplementary

        1. 112.Interpretation of references to enactments

    4. SCHEDULE 4

      Amendments consequential on provisions of the 2018 Act

      1. 1.Anti-terrorism, Crime and Security Act 2001

      2. 2.Investigatory Powers Act 2016

      3. 3.Data Protection Act 2018

  12. Explanatory Note

Back to top

Options/Help

Print Options

You have chosen to open The Whole Instrument

The Whole Instrument you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.

Would you like to continue?

You have chosen to open The Whole Instrument as a PDF

The Whole Instrument you have selected contains over 200 provisions and might take some time to download.

Would you like to continue?

You have chosen to open the Whole Instrument

The Whole Instrument you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.

Would you like to continue?

You have chosen to open Schedules only

The Schedules you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.

Would you like to continue?

Close

Legislation is available in different versions:

Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.

Original (As Enacted or Made): The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.

Close

Opening Options

Different options to open legislation in order to view more content on screen at once

Close

Explanatory Memorandum

Explanatory Memorandum sets out a brief statement of the purpose of a Statutory Instrument and provides information about its policy objective and policy implications. They aim to make the Statutory Instrument accessible to readers who are not legally qualified and accompany any Statutory Instrument or Draft Statutory Instrument laid before Parliament from June 2004 onwards.

Close

More Resources

Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:

  • the original print PDF of the as enacted version that was used for the print copy
  • lists of changes made by and/or affecting this legislation item
  • confers power and blanket amendment details
  • all formats of all associated documents
  • correction slips
  • links to related legislation and further information resources
Close

Timeline of Changes

This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.

Close

More Resources

Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:

  • the original print PDF of the as made version that was used for the print copy
  • correction slips

Click 'View More' or select 'More Resources' tab for additional information including:

  • lists of changes made by and/or affecting this legislation item
  • confers power and blanket amendment details
  • all formats of all associated documents
  • links to related legislation and further information resources

The data on this page is available in the alternative data formats listed: