Data Protection Act 2018 (c. 12)

SCHEDULES

SCHEDULE 6 U.K. The applied GDPR and the applied Chapter 2

PART 1 U.K. Modifications to the GDPR

Section 5 of Chapter III of the GDPR (rights of the data subject: restrictions) U.K.

21 U.K. In Article 23 (restrictions), in paragraph 1—

(a) for “Union or Member State law to which the data controller or processor is subject” substitute “ In addition to the provision made by section 15 of and Schedules 2, 3 and 4 to the 2018 Act, the Secretary of State ”;

(b) in point (e), for “of the Union or of a Member State”, in both places, substitute “ of the United Kingdom ”;

(c) after point (j) insert—

“See section 16 of the 2018 Act.”