SCHEDULES

SCHEDULE 19Minor and consequential amendments

PART 2Amendments of other legislation

Controlled Drugs (Supervision of Management and Use) Regulations 2013 (S.I. 2013/373)

378

1

Regulation 20 of the Controlled Drugs (Supervision of Management and Use) Regulations 2013 (information management) is amended as follows.

2

For paragraph (4) substitute—

4

Where a CDAO, a responsible body or someone acting on their behalf is permitted to share information which includes personal data by virtue of a function under these Regulations, it is to be assumed for the purposes of paragraph 5(2) of Schedule 2 to the Data Protection Act 2018 and paragraph 3(2) of Schedule 11 to that Act (exemptions from certain provisions of the data protection legislation: disclosures required by law) that the disclosure is required by this regulation.

3

In paragraph (5), after “enactment” insert “ or the GDPR ”.

4

After paragraph (6) insert—

7

In this regulation, “the GDPR”, “personal data” and references to Schedule 2 to the Data Protection Act 2018 have the same meaning as in Parts 5 to 7 of that Act (see section 3(2), (10), (11) and (14) of that Act).