SCHEDULE 2Amendments to secondary legislation

I114

In Schedule 4 (conditions for permitted disclosure)—

a

in paragraph 2—

i

in sub-paragraph (a), after “business” insert “ in the United Kingdom or ”; and

ii

in sub-paragraph (b), for “European Economic Area” substitute “ area comprising the United Kingdom and the European Economic Area ”;

b

in paragraph 6—

i

in sub-paragraph (a), omit “or in another EEA State”;

ii

sub-paragraph (b)(ii), for “data protection obligations” substitute “ obligations under the data protection legislation (as defined in section 3 of the Data Protection Act 2018) ”;

c

in paragraph 8—

i

at the end of sub-paragraph (b)(i), insert “ or ”;

ii

omit sub-paragraph (b)(iii), and the “or” before it;

d

in paragraph 9, omit “or in another EEA State”;

e

in paragraph 10, in sub-paragraphs (a) and (b), for “European Economic Area” substitute “ United Kingdom ”;

f

in paragraph 12A(b), for “data protection obligations” substitute “obligations under the data protection legislation (as defined in section 3 of the Data Protection Act 2018);

g

in paragraph 12F, in sub-paragraphs (a) and (b), for “European Economic Area” substitute “ United Kingdom ”;

h

omit paragraph 13(b)(ii);

i

omit paragraph 14.