Data Protection Act 2018 (c. 12)

SCHEDULES

Valid from 25/05/2018

SCHEDULE 6 U.K. The applied GDPR and the applied Chapter 2

PART 1 U.K. Modifications to the GDPR

Section 3 of Chapter IV of the GDPR (controller and processor: data protection impact assessment and prior consultation) U.K.

27 U.K. In Article 35 (data protection impact assessment), omit paragraphs 4, 5, 6 and 10.

28 U.K. In Article 36 (prior consultation)—

(a) for paragraph 4 substitute—

“4 The Secretary of State must consult the Commissioner during the preparation of any proposal for a legislative measure which relates to processing.”;

(b) omit paragraph 5.