In regulation 9 (fees), for paragraph (1) substitute—

“(1A)

In complying with a request made under regulation 5(2), the responsible body may only charge a fee where Article 12(5) or Article 15(3) of the GDPR would permit the charging of a fee if the request had been made by the pupil to whom the information relates under Article 15 of the GDPR.

(1B)

Where paragraph (1A) permits the charging of a fee, the responsible body may not charge a fee that—

(a)

exceeds the cost of supply, or

(b)

exceeds any limit in regulations made under section 12 of the Data Protection Act 2018 that would apply if the request had been made by the pupil to whom the information relates under Article 15 of the GDPR.”