SCHEDULE 3Consequential amendments of other legislation

PART 2Amendments of primary legislation

Freedom of Information (Scotland) Act 2002

22.

(1)

Section 38 of the Freedom of Information (Scotland) Act 2002 (personal information) M1 is amended as follows.

(2)

In subsections (2B) and (3A)(a), for “GDPR” substitute “ UK GDPR ”.

(3)

In subsection (5)—

(a)

in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)

omit the words from “ “the GDPR”, “personal data”, “processing”” to “(14) of that Act);”;

(c)

at the appropriate places insert—

““personal data” and “processing” have the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2), (4) and (14) of that Act);”;

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act).”.

(4)

In subsection (5A), for “GDPR” (in both places) substitute “ UK GDPR ”.