Search Legislation

The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019

Status:

This version of this schedule contains provisions that are prospective. Help about Status

Close

Status

The term provision is used to describe a definable element in a piece of legislation that has legislative effect – such as a Part, Chapter or section. A version of a provision is prospective either:

  1. where the provision (Part, Chapter or section) has never come into force or;
  2. where the text of the provision is subject to change, but no date has yet been appointed by the appropriate person or body for those changes to come into force.

Commencement Orders listed in the ‘Changes to Legislation’ box as not yet applied may bring this prospective version into force.

Changes to legislation:

There are currently no known outstanding effects for the The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019, SCHEDULE 3. Help about Changes to Legislation

Close

Changes to Legislation

Revised legislation carried on this site may not be fully up to date. At the current time any known changes or effects made by subsequent legislation have been applied to the text of the legislation you are viewing by the editorial team. Please see ‘Frequently Asked Questions’ for details regarding the timescales for which new effects are identified and recorded on this site.

Regulation 6

SCHEDULE 3U.K.Consequential amendments of other legislation

This schedule has no associated Explanatory Memorandum

PART 1U.K.Revocation of retained EU law

Revocation of Regulations and DecisionsU.K.

1.  The following Regulations and Decisions are revoked in so far as they are retained EU law—

(a)Commission Decision 2000/518/EC of 26th July 2000 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided in Switzerland;

[F1(aa)Commission Decision 2000/519/EC of 26th July 2000 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided in Hungary;]

(b)Commission Decision 2001/497/EC M1 of 15th June 2001 on standard contractual clauses for the transfer of personal data to third countries, under Directive 95/46/EC;

(c)Commission Decision 2002/2/EC of 20th December 2001 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documents Act;

(d)Commission Decision 2003/490/EC of 30th June 2003 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data in Argentina;

(e)Commission Decision 2003/821/EC of 21st November 2003 on the adequate protection of personal data in Guernsey;

(f)Commission Decision 2004/411/EC of 28th April 2004 on the adequate protection of personal data in the Isle of Man;

[F2(fa)Council Decision 2004/644/EC of 13th September 2004 adopting implementing rules concerning Regulation (EC) No 45/2001 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data;]

(g)Commission Decision 2004/915/EC M2 of 27th December 2004 amending Decision 2001/497/EC as regards the introduction of an alternative set of standard contractual clauses for the transfer of personal data to third countries;

(h)Commission Decision 2008/393/EC of 8th May 2008 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data in Jersey;

[F3(ha)Commission Decision 2008/597/EC of 3rd June 2008 adopting implementing rules concerning the Data Protection Officer pursuant to Article 24(8) of Regulation (EC) No 45/2001 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data;]

(i)Commission Decision 2010/87/EU M3 of 5th February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council;

(j)Commission Decision 2010/146/EU of 5th March 2010 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection provided by the Faeroese Act on processing of personal data;

(k)Commission Decision 2010/625/EU of 19th October 2010 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data in Andorra;

(l)Commission Decision 2011/61/EU of 31st January 2011 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the State of Israel with regard to automated processing of personal data;

(m)Commission Implementing Decision 2012/484/EU of 21st August 2012 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the Eastern Republic of Uruguay with regard to automated processing of personal data;

(n)Commission Implementing Decision 2013/65/EU of 19th December 2012 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by New Zealand;

(o)Commission Implementing Decision (EU) 2016/1250 of 12th July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-U.S. Privacy Shield;

(p)Commission Implementing Decision (EU) 2016/2295 M4 of 16th December 2016 amending Decisions 2000/518/EC, 2002/2/EC, 2003/490/EC, 2003/821/EC, 2004/411/EC, 2008/393/EC, 2010/146/EU, 2010/625/EU, 2011/61/EU and Implementing Decisions 2012/484/EU, 2013/65/EU on the adequate protection of personal data by certain countries, pursuant to Article 25(6) of Directive 95/46/EC of the European Parliament and of the Council;

(q)Commission Implementing Decision (EU) 2016/2297 M5 of 16th December 2016 amending Decisions 2001/497/EC and 2010/87/EU on standard contractual clauses for the transfer of personal data to third countries and to processors established in such countries, under Directive 95/46/EC of the European Parliament and of the Council;

(r)Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23rd October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC.

[F4(s)Commission Decision (EU) 2019/165 of 1st February 2019 laying down internal rules concerning the provision of information to data subjects and the restriction of certain of their data protection rights by the Commission in the context of administrative inquiries, pre-disciplinary, disciplinary and suspension proceedings;

(t)Commission Implementing Decision (EU) 2019/419 of 23rd January 2019 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by Japan under the Act on the Protection of Personal Information;

(u)Regulation (EU, Euratom) 2019/493 of the European Parliament and of the Council of 25th March 2019 amending Regulation (EU, Euratom) No 1141/2014 as regards a verification procedure related to infringements of rules on the protection of personal data in the context of elections to the European Parliament.]

Textual Amendments

Commencement Information

I1Sch. 3 para. 1 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M1OJ L 181, 4.7.2001, p. 19-31.

M2OJ L 385, 29.12.2004, p. 74-84.

M3OJ L 39, 12.2.2010, p. 5-18.

M4OJ L 344, 17.12.2016, p. 83-91.

M5OJ L 344, 17.12.2016, p. 100-101.

Revocation of provisions of EEA agreementU.K.

2.  Paragraphs 5e, 5ea, 5ed, 5ee, 5ef, 5eg, 5eh, 5ei, 5ek, 5el, 5em, 5en, 5eo, 5ep [F5, 5eq, 5er and 5es] of Annex 11 to the EEA agreement, as it forms part of the law of England and Wales, Scotland or Northern Ireland on and after [F6IP completion day] by virtue of section 3(1) of the European Union (Withdrawal) Act 2018, are revoked in so far as they are retained EU law.

Textual Amendments

F5Words in Sch. 3 para. 2 substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 6(3)(a)

F6Words in Sch. 3 para. 2 substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 6(3)(b)

Commencement Information

I2Sch. 3 para. 2 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

PART 2U.K.Amendments of primary legislation

Consumer Credit Act 1974U.K.

3.  The Consumer Credit Act 1974 M6 is amended as follows.

Commencement Information

I3Sch. 3 para. 3 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

4.  In section 157(2A)(a) (duty to disclose name etc of agency), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I4Sch. 3 para. 4 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

5.  In section 159(1)(a) (correction of wrong information), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I5Sch. 3 para. 5 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

6.  In section 189(1) (definitions)—U.K.

(a)omit the definition of “the GDPR”;

(b)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I6Sch. 3 para. 6 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Pharmacy (Northern Ireland) Order 1976U.K.

7.  In paragraph 2 of Schedule 3 to the Pharmacy (Northern Ireland) Order 1976 M7 (fitness to practice: disclosure of information)—

(a)in sub-paragraph (2)(a), for “GDPR” substitute “ UK GDPR ”;

(b)for sub-paragraph (5) substitute—

(5) In this paragraph, “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

Commencement Information

I7Sch. 3 para. 7 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Medical Act 1983U.K.

8.  The Medical Act 1983 M8 is amended as follows.

Commencement Information

I8Sch. 3 para. 8 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

9.—(1) Section 29E (evidence) is amended as follows.U.K.

(2) In subsection (5), for “GDPR” substitute “ UK GDPR ”.

(3) In subsection (9), omit the definition of “the GDPR”.

Commencement Information

I9Sch. 3 para. 9 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

10.—(1) Section 35A (General Medical Council's power to require disclosure of information) is amended as follows.U.K.

(2) In subsection (4), for “GDPR” substitute “ UK GDPR ”.

(3) In subsection (7), omit the definition of “the GDPR”.

Commencement Information

I10Sch. 3 para. 10 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

11.  In section 55(1) (interpretation), at the appropriate place insert—U.K.

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I11Sch. 3 para. 11 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

12.  In paragraph 9B of Schedule 1 (incidental powers of the General Medical Council)—U.K.

(a)in sub-paragraph (2)(a), for “GDPR” substitute “ UK GDPR ”;

(b)omit sub-paragraph (4).

Commencement Information

I12Sch. 3 para. 12 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

13.  In paragraph 5A of Schedule 4 (professional performance assessments and health assessments)—U.K.

(a)in sub-paragraph (8), for “GDPR” substitute “ UK GDPR ”;

(b)omit sub-paragraph (14).

Commencement Information

I13Sch. 3 para. 13 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Dentists Act 1984U.K.

14.  The Dentists Act 1984 M9 is amended as follows.

Commencement Information

I14Sch. 3 para. 14 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

15.—(1) Section 33B (the General Dental Council's power to require disclosure of information: the dental profession) is amended as follows.U.K.

(2) In subsection (3), for “GDPR” substitute “ UK GDPR ”.

(3) In subsection (4), in the definition of “relevant provision of the GDPR”—

(a)for “the GDPR” (in both places) substitute “ the UK GDPR ”;

(b)for “GDPR provisions” substitute “ UK GDPR provisions ”.

(4) Omit subsection (11).

Commencement Information

I15Sch. 3 para. 15 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

16.—(1) Section 36Y (the General Dental Council's power to require disclosure of information: professions complementary to dentistry) is amended as follows.U.K.

(2) In subsection (3), for “GDPR” substitute “ UK GDPR ”.

(3) In subsection (4), in the definition of “relevant provision of the GDPR”—

(a)for “the GDPR” (in both places) substitute “ the UK GDPR ”;

(b)for “GDPR provisions” (in the second place) substitute “ UK GDPR provisions ”.

(4) Omit subsection (11).

Commencement Information

I16Sch. 3 para. 16 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

17.  In section 53(1) (interpretation), at the appropriate place insert—U.K.

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I17Sch. 3 para. 17 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Opticians Act 1989U.K.

18.—(1) Section 13B of the Opticians Act 1989 (the Council's power to require disclosure of information) M10 is amended as follows.

(2) In subsection (3), for “GDPR” substitute “ UK GDPR ”.

(3) For subsection (10) substitute—

(10) In this section, “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

Commencement Information

I18Sch. 3 para. 18 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Immigration and Asylum Act 1999U.K.

19.—(1) Section 13 of the Immigration and Asylum Act 1999 (proof of identity of persons to be removed or deported) M11 is amended as follows.

(2) In subsection (4), for “GDPR” substitute “ UK GDPR ”.

(3) For subsection (4A) substitute—

(4A) The UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

Commencement Information

I19Sch. 3 para. 19 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Freedom of Information Act 2000U.K.

20.—(1) Section 40 of the Freedom of Information Act 2000 (personal information) M12 is amended as follows.

(2) In subsections (3B), (4A)(a) and (5B)(b) and (c), for “GDPR” substitute “ UK GDPR ”.

(3) In subsection (7)—

(a)in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)omit the words from “ “the GDPR”, “personal data”, “processing”” to the “(14) of that Act);”;

(c)at the appropriate places insert—

personal data” and “processing” have the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2), (4) and (14) of that Act);;

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

(4) In subsection (8), for “GDPR” (in both places) substitute “ UK GDPR ”.

Commencement Information

I20Sch. 3 para. 20 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Health and Personal Social Services Act (Northern Ireland) 2001U.K.

21.—(1) Section 7A of the Health and Personal Social Services Act (Northern Ireland) 2001 (power to obtain information etc) M13 is amended as follows.

(2) In subsection (3), for “GDPR” substitute “ UK GDPR ”.

(3) For subsection (8) substitute—

(8) In this section, “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

Commencement Information

I21Sch. 3 para. 21 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Freedom of Information (Scotland) Act 2002U.K.

22.—(1) Section 38 of the Freedom of Information (Scotland) Act 2002 (personal information) M14 is amended as follows.

(2) In subsections (2B) and (3A)(a), for “GDPR” substitute “ UK GDPR ”.

(3) In subsection (5)—

(a)in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)omit the words from “ “the GDPR”, “personal data”, “processing”” to “(14) of that Act);”;

(c)at the appropriate places insert—

personal data” and “processing” have the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2), (4) and (14) of that Act);;

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

(4) In subsection (5A), for “GDPR” (in both places) substitute “ UK GDPR ”.

Commencement Information

I22Sch. 3 para. 22 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Mental Health (Care and Treatment) (Scotland) Act 2003U.K.

23.—(1) Section 279 of the Mental Health (Care and Treatment) (Scotland) Act 2003 (information for research) M15 is amended as follows.

(2) In subsection (2), for “GDPR” substitute “ UK GDPR ”.

(3) For subsection (10) substitute—

(10) In this section, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I23Sch. 3 para. 23 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Crime and Courts Act 2013U.K.

24.—(1) Section 42 of the Crime and Courts Act 2013 (other interpretive provisions) M16 is amended as follows.

(2) In subsection (5)(a), for “GDPR” substitute “ UK GDPR ”.

(3) For subsection (5A) substitute—

(5A) In subsection (5)(a), “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

Commencement Information

I24Sch. 3 para. 24 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Small Business, Enterprise and Employment Act 2015U.K.

25.—(1) Section 6 of the Small Business, Enterprise and Employment Act 2015 (application of listed provisions to designated credit reference agencies) M17 is amended as follows.

(2) In subsection (7)(b), for “GDPR” substitute “ UK GDPR ”.

(3) For subsection (7A) substitute—

(7A) In subsection (7), “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

Commencement Information

I25Sch. 3 para. 25 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Social Security (Scotland) Act 2018U.K.

26.—(1) Section 60 of the Social Security (Scotland) Act 2018 (right to reports used in determining entitlement) M18 is amended as follows.

(2) In subsection (2), for “GDPR” substitute “ UK GDPR ”.

(3) For subsection (3) substitute—

(3) In subsection (2), “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I26Sch. 3 para. 26 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

PART 3U.K.Amendments of other legislation

Channel Tunnel (International Arrangements) Order 1993U.K.

27.—(1) Article 4 of the Channel Tunnel (International Arrangements) Order 1993 (application of enactments) M19 is amended as follows.

(2) In paragraph (2)—

(a)after “For the purposes of” insert “ Article 3 of the UK GDPR and ”;

(b)in the words following paragraph (c), after “establishment (and” insert “ the UK GDPR and ”.

(3) In paragraph (3)—

(a)after “For the purposes of” insert “ Article 3 of the UK GDPR and ”;

(b)in the words following paragraph (b), after “establishment (and” insert “ the UK GDPR and ”.

(4) After paragraph (3) insert—

(4) In this article, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I27Sch. 3 para. 27 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Channel Tunnel (Miscellaneous Provisions) Order 1994U.K.

28.—(1) Article 4 of the Channel Tunnel (Miscellaneous Provisions) Order 1994 (application of enactments) M20 is amended as follows.

(2) In paragraph (2)—

(a)after “For the purposes of” insert “ Article 3 of the UK GDPR and ”;

(b)for “the 2018 Act applies” substitute “ the UK GDPR and the 2018 Act apply ”.

(3) In paragraph (3)—

(a)after “For the purposes of” insert “ Article 3 of the UK GDPR and ”;

(b)for “the 2018 Act does” substitute “ the UK GDPR and the 2018 Act do ”.

(4) After paragraph (3) insert—

(4) In this article, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I28Sch. 3 para. 28 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Scottish Parliamentary Corporate Body (Crown Status) Order 1999U.K.

29.  In article 7 of the Scottish Parliamentary Corporate Body (Crown Status) Order 1999 (Data Protection Act 2018) M21

(a)in paragraph (2)(a), (d) and (e), for “GDPR” substitute “ UK GDPR ”;

(b)omit paragraph (5).

Commencement Information

I29Sch. 3 para. 29 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Northern Ireland Assembly Commission (Crown Status) Order 1999U.K.

30.  In article 9 of the Northern Ireland Assembly Commission (Crown Status) Order 1999 (Data Protection Act 2018) M22

(a)in paragraph (2)(a), (d) and (e), for “GDPR” substitute “ UK GDPR ”;

(b)omit paragraph (5).

Commencement Information

I30Sch. 3 para. 30 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Representation of the People (England and Wales) Regulations 2001U.K.

31.  The Representation of the People (England and Wales) Regulations 2001 M23 are amended as follows.

Commencement Information

I31Sch. 3 para. 31 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

32.—(1) Regulation 3(1) (interpretation) is amended as follows.U.K.

(2) In the definition of “Article 89 GDPR purposes”, for “the GDPR” substitute “ the UK GDPR ”.

(3) Omit the definition of “the GDPR”.

(4) At the appropriate place insert—

the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018;.

Commencement Information

I32Sch. 3 para. 32 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

33.  In regulation 92(2)(ba) (interpretation and application of Part VI etc), for “the GDPR” substitute “ the UK GDPR ”.U.K.

Commencement Information

I33Sch. 3 para. 33 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Representation of the People (Scotland) Regulations 2001U.K.

34.  The Representation of the People (Scotland) Regulations 2001 M24 are amended as follows.

Commencement Information

I34Sch. 3 para. 34 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

35.—(1) Regulation 3(1) (interpretation) is amended as follows.U.K.

(2) In the definition of “Article 89 GDPR purposes”, for “the GDPR” substitute “ the UK GDPR ”.

(3) Omit the definition of “the GDPR”.

(4) At the appropriate place insert—

the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018;.

Commencement Information

I35Sch. 3 para. 35 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

36.  In regulation 92(2)(ba) (interpretation of Part VI etc), for “the GDPR” substitute “ the UK GDPR ”.U.K.

Commencement Information

I36Sch. 3 para. 36 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Financial Services and Markets Act 2000 (Disclosure of Confidential Information) Regulations 2001U.K.

37.—(1) Regulation 9 of the Financial Services and Markets 2000 (Disclosure of Confidential Information) Regulations 2001 (disclosure by regulators or regulator workers to certain other persons) M25 is amended as follows.

(2) In paragraph (2B)(a), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (6) substitute—

(6) In this regulation, “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

Commencement Information

I37Sch. 3 para. 37 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Nursing and Midwifery Order 2001U.K.

38.  The Nursing and Midwifery Order 2001 M26 is amended as follows.

Commencement Information

I38Sch. 3 para. 38 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

39.—(1) Article 3 (the Nursing and Midwifery Council and its Committees) is amended as follows.U.K.

(2) In paragraph (18), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (19).

Commencement Information

I39Sch. 3 para. 39 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

40.—(1) Article 25 (the Council's power to require disclosure of information) is amended as follows.U.K.

(2) In paragraph (3), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (6), omit the definition of “the GDPR”.

Commencement Information

I40Sch. 3 para. 40 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

41.  In article 40(6) (Directive 2005/36/EC: designation of competent authority etc), omit the definition of “the GDPR”.U.K.

Commencement Information

I41Sch. 3 para. 41 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

42.  In Schedule 4 (interpretation), at the appropriate place insert—U.K.

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I42Sch. 3 para. 42 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Electronic Commerce (EC Directive) Regulations 2002U.K.

43.—(1) Regulation 3 of the Electronic Commerce (EC Directive) Regulations 2002 (exclusions) M27 is amended as follows.

(2) In paragraph (1)(b), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (3)—

(a)omit the definition of “the GDPR”;

(b)at the appropriate place insert—

the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018;.

Commencement Information

I43Sch. 3 para. 43 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Privacy and Electronic Communications (EC Directive) Regulations 2003U.K.

44.  In regulation 2(1) of the Privacy and Electronic Communications (EC Directive) Regulations 2003 M28, for “GDPR” substitute “ UK GDPR ”.

Commencement Information

I44Sch. 3 para. 44 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003U.K.

45.  The Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003 M29 is amended as follows.

Commencement Information

I45Sch. 3 para. 45 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

46.—(1) Article 8 (exercise of powers by French officers in a control zone in the United Kingdom: disapplication of law of England and Wales) is amended as follows.U.K.

(2) In paragraph (2), for “The Data Protection Act 2018” substitute “The UK GDPR and the Data Protection Act 2018.

(3) After paragraph (2) insert—

(2A) In paragraph (2), “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I46Sch. 3 para. 46 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

47.—(1) Article 11 (exercise of powers by UK immigration officers and constables in a control zone in France: enactments having effect) is amended as follows.U.K.

(2) In paragraph (4)—

(a)for “The Data Protection Act 2018” substitute “ The UK GDPR and the Data Protection Act 2018 (“the 2018 Act”) ”;

(b)for “section 207 of that Act” substitute “ Article 3 of the UK GDPR and section 207 of the 2018 Act ”.

(3) After paragraph (4) insert—

(4A) In paragraph (4), “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I47Sch. 3 para. 47 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Pupils' Educational Records (Scotland) Regulations 2003U.K.

48.  The Pupils' Educational Records (Scotland) Regulations 2003 M30 are amended as follows.

Commencement Information

I48Sch. 3 para. 48 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

49.  In regulation 2 (interpretation)—U.K.

(a)omit the definition of “the GDPR”;

(b)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I49Sch. 3 para. 49 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

50.  In regulation 6(aa) and (ab) (circumstances where information should not be disclosed), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I50Sch. 3 para. 50 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

51.  In regulation 9(1A) (in both places) and (1B), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I51Sch. 3 para. 51 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Environmental Information Regulations 2004U.K.

52.  The Environmental Information Regulations 2004 M31 are amended as follows.

Commencement Information

I52Sch. 3 para. 52 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

53.—(1) Regulation 2 (interpretation) is amended as follows.U.K.

(2) In paragraph (1)—

(a)in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)omit the words from “ “the GDPR”” to “(14) of that Act);”;

(c)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

(3) In paragraph (4A)—

(a)after “references to” insert “ the UK GDPR and ”;

(b)after “as if in” insert “ Article 2 of the UK GDPR and ”;

(c)for “(other general processing)” substitute “ (exemptions for manual unstructured processing and for national security and defence purposes) ”.

Commencement Information

I53Sch. 3 para. 53 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

54.  In regulation 13 (personal data), in paragraphs (2B)(a), (3A)(a), (5B)(b) and (c) and (6) (in both places), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I54Sch. 3 para. 54 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Environmental Information (Scotland) Regulations 2004U.K.

55.  The Environmental Information (Scotland) Regulations 2004 M32 are amended as follows.

Commencement Information

I55Sch. 3 para. 55 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

56.—(1) Regulation 2 (interpretation) is amended as follows.U.K.

(2) In paragraph (1)—

(a)in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)omit the words from “ “the GDPR”” to “(14) of that Act);”;

(c)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

(3) In paragraph (3A)—

(a)after “references to” insert “ the UK GDPR and ”;

(b)after “as if in” insert “ Article 2 of the UK GDPR and ”;

(c)for “(other general processing)” substitute “ (exemptions for manual unstructured processing and for national security and defence purposes) ”.

Commencement Information

I56Sch. 3 para. 56 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

57.  In regulation 11 (personal data), in paragraphs (3B), (4A)(a) and (7) (in both places), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I57Sch. 3 para. 57 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Licensing Act 2003 (Personal Licences) Regulations 2005U.K.

58.—(1) Regulation 7 of the Licensing Act 2003 (Personal Licences) Regulations 2005 (application for grant of a personal licence) M33 is amended as follows.

(2) In paragraph (1)(b)(iii), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (3) substitute—

(3) In this regulation, “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

Commencement Information

I58Sch. 3 para. 58 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Education (Pupil Information) (England) Regulations 2005U.K.

59.—(1) Regulation 5 of the Education (Pupil Information) (England) Regulations 2005 (disclosure of curricular and educational records) M34 is amended as follows.

(2) In paragraph (4), for “GDPR” (in both places) substitute “ UK GDPR ”.

(3) For paragraph (7) substitute—

(7) In this regulation, “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act)..

Commencement Information

I59Sch. 3 para. 59 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005U.K.

60.—(1) Regulation 45 of the Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005 (sensitive information) M35 is amended as follows.

(2) In paragraphs (1B)(a) and (1C)(a), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (1D)—

(a)in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)omit the words from “ “the GDPR”” to “(14) of that Act);”;

(c)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

(4) In paragraph (1E), for “GDPR” (in both places) substitute “ UK GDPR ”.

Commencement Information

I60Sch. 3 para. 60 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005U.K.

61.—(1) Regulation 39 of the Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005 (sensitive information) M36 is amended as follows.

(2) In paragraphs (1B)(a) and (1C)(a), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (1D)—

(a)in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)omit the words from “ “the GDPR”” to “(14) of that Act);”;

(c)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

(4) In paragraph (1E), for “GDPR” (in both places) substitute “ UK GDPR ”.

Commencement Information

I61Sch. 3 para. 61 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Register of Judgments, Orders and Fines Regulations 2005U.K.

62.  In regulation 3 of the Register of Judgments, Orders and Fines Regulations 2005 (interpretation) M37

(a)in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)omit the definition of “the GDPR”;

(c)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I62Sch. 3 para. 62 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

National Assembly for Wales (Representation of the People) Order 2007U.K.

63.—(1) Paragraph 14 of Schedule 1 to the National Assembly for Wales (Representation of the People) Order 2007 (absent voting at Assembly elections: conditions on the use, supply and inspection of absent vote records or lists) M38 is amended as follows.

(2) In sub-paragraph (1)(a), for “GDPR” substitute “ UK GDPR ”.

(3) For sub-paragraph (2) substitute—

(2) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I63Sch. 3 para. 63 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

National Assembly for Wales Commission (Crown Status) Order 2007U.K.

64.  In article 5 of the National Assembly for Wales Commission (Crown Status) Order 2007 (Data Protection Act 2018) M39

(a)in paragraph (2)(a), (d) and (e), for “GDPR” substitute “ UK GDPR ”;

(b)omit paragraph (5).

Commencement Information

I64Sch. 3 para. 64 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007U.K.

65.—(1) Regulation 18 of the Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007 (conditions on the supply and inspection of absent voter records or lists) M40 is amended as follows.

(2) In paragraph (1)(a), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (2) substitute—

(2) In this regulation, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I65Sch. 3 para. 65 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007U.K.

66.—(1) Regulation 5 of the Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007 (conditions on the use, supply and disclosure of documents open to public inspection) M41 is amended as follows.

(2) In paragraph (2)(i), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (4) substitute—

(4) In this regulation, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I66Sch. 3 para. 66 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007U.K.

67.  The Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007 M42 are amended as follows.

Commencement Information

I67Sch. 3 para. 67 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M42S.R. (N.I.) 2007 No. 43.

68.  In regulation 2 (interpretation)—U.K.

(a)omit the definition of “the GDPR”;

(b)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I68Sch. 3 para. 68 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

69.  In regulation 10(2) (duties of Boards of Governors), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I69Sch. 3 para. 69 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Representation of the People (Northern Ireland) Regulations 2008U.K.

70.—(1) Regulation 118 of the Representation of the People (Northern Ireland) Regulations 2008 (conditions on the use, supply and disclosure of documents open to public inspection) M43 is amended as follows.

(2) In paragraph (2), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (4) substitute—

(4) In this regulation, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I70Sch. 3 para. 70 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Controlled Drugs (Supervision of Management and Use) (Wales) Regulations 2008U.K.

F771.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Textual Amendments

F7Sch. 3 paras. 71-75 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

F772.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .U.K.

Textual Amendments

F7Sch. 3 paras. 71-75 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

F773.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .U.K.

Textual Amendments

F7Sch. 3 paras. 71-75 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

F774.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .U.K.

Textual Amendments

F7Sch. 3 paras. 71-75 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

F775.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .U.K.

Textual Amendments

F7Sch. 3 paras. 71-75 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008U.K.

76.—(1) Regulation 5 of the Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008 (information whose disclosure would be affected by the application of other legislation) M44 is amended as follows.

(2) In paragraph (3B)(a), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (5)—

(a)in the definition of “data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)omit the definition of “the GDPR”;

(c)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I71Sch. 3 para. 76 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M44S.R. (N.I.) 2008 No. 3.

INSPIRE Regulations 2009U.K.

77.—(1) Regulation 9 of the INSPIRE Regulations 2009 (public access to spatial data sets and spatial data services) M45 is amended as follows.

(2) In paragraph (2)(b), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (8)—

(a)in the definition of “data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)omit the definition of “the GDPR”;

(c)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

(4) In paragraph (9), for “GDPR” (in both places) substitute “ UK GDPR ”.

Commencement Information

I72Sch. 3 para. 77 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

INSPIRE (Scotland) Regulations 2009U.K.

78.—(1) Regulation 10 of the INSPIRE (Scotland) Regulations 2009 (public access to spatial data sets and spatial data services) M46 is amended as follows.

(2) In paragraph (2)(b), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (7)—

(a)in the definition of “data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b)omit the definition of “the GDPR”;

(c)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

(4) In paragraph (8), for “GDPR” (in both places) substitute “ UK GDPR ”.

Commencement Information

I73Sch. 3 para. 78 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009U.K.

79.  The Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009 M47 are amended as follows.

Commencement Information

I74Sch. 3 para. 79 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M47S.R. (N.I.) 2009 No. 225.

80.  In regulation 2(2) (interpretation)—U.K.

(a)omit the words from “ “the GDPR”” to “(14) of that Act);”;

(b)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I75Sch. 3 para. 80 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

81.  In regulation 25(7) (duty to co-operate by disclosing information as regards relevant persons), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I76Sch. 3 para. 81 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

82.  In regulation 26(6) (responsible bodies requesting additional information be disclosed about relevant persons), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I77Sch. 3 para. 82 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

83.  In regulation 29(3) (occurrence reports), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I78Sch. 3 para. 83 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Pharmacy Order 2010U.K.

84.  The Pharmacy Order 2010 M48 is amended as follows.

Commencement Information

I79Sch. 3 para. 84 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

85.  In article 3(1) (interpretation), at the appropriate place insert—U.K.

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I80Sch. 3 para. 85 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

86.  In article 9(5) (inspection and enforcement), for “and references to Schedule 2 to the Data Protection Act 2018 have” substitute “ has ”.U.K.

Commencement Information

I81Sch. 3 para. 86 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

87.—(1) Article 49 (disclosure of information: general) is amended as follows.U.K.

(2) In paragraph (2)(a), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (6).

Commencement Information

I82Sch. 3 para. 87 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

88.—(1) Article 55 (professional performance assessments) is amended as follows.U.K.

(2) In paragraph (5)(a), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (9).

Commencement Information

I83Sch. 3 para. 88 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Local Elections (Northern Ireland) Order 2010U.K.

89.  In paragraph 1(1) of Schedule 3 to the Local Elections (Northern Ireland) Order 2010 (access to marked registers and other documents open to public inspection after an election) M49

(a)in the definition of “Article 89 GDPR purposes”, for “the GDPR” substitute “ the UK GDPR ”;

(b)omit the definition of “the GDPR”;

(c)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I84Sch. 3 para. 89 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Prospective

Pupil Information (Wales) Regulations 2011U.K.

F890.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Textual Amendments

F8Sch. 3 para. 90 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

Prospective

F991.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .U.K.

Textual Amendments

F9Sch. 3 para. 91 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

Police and Crime Commissioner Elections Order 2012U.K.

92.  The Police and Crime Commissioner Elections Order 2012 M50 is amended as follows.

Commencement Information

I85Sch. 3 para. 92 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

93.—(1) Schedule 2 (absent voting in Police and Crime Commissioner elections) is amended as follows.U.K.

(2) In paragraph 20 (absent voter lists: supply of copies etc)—

(a)in sub-paragraph (8)(a), for “GDPR” substitute “ UK GDPR ”;

(b)for sub-paragraph (11) substitute—

(11) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

(3) In paragraph 24 (restriction on use of absent voter records or lists or the information contained in them)—

(a)in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b)for sub-paragraph (4) substitute—

(4) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I86Sch. 3 para. 93 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

94.—(1) Schedule 10 (access to marked registers and other documents open to public inspection after an election) is amended as follows.U.K.

(2) In paragraph 5 (restriction on use of absent voter records or lists or the information contained in them)—

(a)in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b)for sub-paragraph (5) substitute—

(5) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018..

Commencement Information

I87Sch. 3 para. 94 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Neighbourhood Planning (Referendums) Regulations 2012U.K.

95.  In paragraph 29(1) of Schedule 6 to the Neighbourhood Planning (Referendums) Regulations 2012 (interpretation of Part 8) M51

(a)in the definition of “Article 89 GDPR purposes”, for “the GDPR” substitute “ the UK GDPR ”;

(b)omit the definition of “the GDPR”;

(c)in the definition of “relevant requirement”, for “the GDPR” substitute “ the UK GDPR ”;

(d)at the appropriate place insert—

the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018;.

Commencement Information

I88Sch. 3 para. 95 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Controlled Drugs (Supervision of Management and Use) Regulations 2013U.K.

96.—(1) Regulation 20 of the Controlled Drugs (Supervision of Management and Use) Regulations 2013 (information management) M52 is amended as follows.

(2) In paragraph (5), for “GDPR” (in both places) substitute “ UK GDPR ”.

(3) For paragraph (7) substitute—

(7) In this regulation, “personal data” and “the UK GDPR” have the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2), (10) and (14) of that Act)..

Commencement Information

I89Sch. 3 para. 96 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Small and Medium Sized Business (Credit Information) Regulations 2015U.K.

97.—(1) Regulation 15 of the Small and Medium Sized Business (Credit Information) Regulations 2015 (access to and correction of information for individuals and small firms) M53 is amended as follows.

(2) In paragraph (1), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (4).

Commencement Information

I90Sch. 3 para. 97 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Scottish Parliament (Elections etc) Order 2015U.K.

98.  The Scottish Parliament (Elections etc) Order 2015 M54 is amended as follows.

Commencement Information

I91Sch. 3 para. 98 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

99.—(1) Schedule 3 (absent voting) is amended as follows.U.K.

(2) In paragraph 16 (absent voting lists: supply of copies etc)—

(a)in sub-paragraph (4)(a), for “GDPR” substitute “ UK GDPR ”;

(b)for sub-paragraph (11) substitute—

(11) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

(3) In paragraph 20 (restriction on use of absent voting lists)—

(a)in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b)for sub-paragraph (4) substitute—

(4) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

Commencement Information

I92Sch. 3 para. 99 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

100.  In Schedule 8 (access to marked registers and other documents open to public inspection after an election), in paragraph 5 (restriction on use of documents)—U.K.

(a)in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b)for sub-paragraph (5) substitute—

(5) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

Commencement Information

I93Sch. 3 para. 100 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Electronic Identification and Trust Services for Electronic Transactions Regulations 2016U.K.

101.  In Schedule 2 to the Electronic Identification and Trust Services for Electronic Transactions Regulations 2016 (Information Commissioner's enforcement powers) M55, in paragraph 16(a) and (b) (modification of section 159 of the Data Protection Act 2018), for “GDPR” substitute “ UK GDPR ”.

Commencement Information

I94Sch. 3 para. 101 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

Court Files Privileged Access Rules (Northern Ireland) 2016U.K.

102.  The Court Files Privileged Access Rules (Northern Ireland) 2016 M56 are amended as follows.

Commencement Information

I95Sch. 3 para. 102 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M56S.R. (N.I.) 2016 No. 123.

103.  In rule 2 (interpretation), at the appropriate place insert—U.K.

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I96Sch. 3 para. 103 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

104.  In rule 5(a) (information that may be released), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I97Sch. 3 para. 104 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

105.  In rule 7(2)(a) (provision of information), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I98Sch. 3 para. 105 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017U.K.

106.  The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 M57 are amended as follows.

Commencement Information

I99Sch. 3 para. 106 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

107.  In regulation 3(1) (interpretation)—U.K.

(a)omit the words from “ “the GDPR” to “(14) of that Act);”;

(b)at the appropriate place insert—

the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);.

Commencement Information

I100Sch. 3 para. 107 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

108.  In regulation 16(8)(b) (risk assessment by the Treasury and Home Office), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I101Sch. 3 para. 108 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

109.  In regulation 17(9)(b) (risk assessment by supervisory authorities), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I102Sch. 3 para. 109 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

110.  In regulation 41 (data protection), in paragraphs (3)(a), (6), (7), (8) and (9), for “GDPR” substitute “ UK GDPR ”.U.K.

Commencement Information

I103Sch. 3 para. 110 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

PART 4U.K.Modification

References to the GDPRU.K.

111.—(1) Legislation described in sub-paragraph (2) has effect on and after [F10IP completion day] as if it were modified in accordance with sub-paragraphs (3) and (4) (but see sub-paragraph (5)).

(2) That legislation is—

(a)subordinate legislation made on or before [F11IP completion day];

(b)primary legislation passed or made on or before [F11IP completion day”].

(3) The following have effect as references to the UK GDPR—

(a)references to the GDPR as defined in section 3(10) of the 2018 Act or as defined for the purposes of Parts 5 to 7 of the 2018 Act;

(b)other references to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).

(4) References described in sub-paragraph (3) which are references to the GDPR or the Regulation read with Chapter 2 of Part 2 of the 2018 Act have effect as references to the UK GDPR read with Part 2 of that Act.

(5) Sub-paragraphs (1) to (4) have effect unless the context otherwise requires and, in particular, do not affect references to the Regulation mentioned in sub-paragraph (3)(b) as it has effect in EU law.

(6) Paragraph 2 of Schedule 21 to the 2018 Act (inserted by these Regulations) has effect in relation to references to the UK GDPR arising as a result of this paragraph as it has effect in relation of other references to the UK GDPR.

(7) In this paragraph—

primary legislation” has the meaning given in section 211 of the 2018 Act;

references” includes any references, however expressed;

subordinate legislation” has the meaning given in the Interpretation Act 1978.

Textual Amendments

F10Words in Sch. 3 para. 111(1) substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 6(4)(a)

F11Words in Sch. 3 para. 111(2) substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 6(4)(b)

Commencement Information

I104Sch. 3 para. 111 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

PART 5U.K.Supplementary

Interpretation of references to enactmentsU.K.

112.  Nothing in Parts 2 to 4 of this Schedule is to be read as implying anything about whether references to an enactment or statutory provision (whether in Acts or instruments amended by those Parts of this Schedule or elsewhere) include the UK GDPR or other retained direct EU legislation.

Commencement Information

I105Sch. 3 para. 112 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Back to top

Options/Help

Print Options

You have chosen to open The Whole Instrument

The Whole Instrument you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.

Would you like to continue?

You have chosen to open The Whole Instrument as a PDF

The Whole Instrument you have selected contains over 200 provisions and might take some time to download.

Would you like to continue?

You have chosen to open the Whole Instrument

The Whole Instrument you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.

Would you like to continue?

You have chosen to open Schedules only

The Schedules you have selected contains over 200 provisions and might take some time to download. You may also experience some issues with your browser, such as an alert box that a script is taking a long time to run.

Would you like to continue?

Close

Legislation is available in different versions:

Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.

Original (As Enacted or Made): The original version of the legislation as it stood when it was enacted or made. No changes have been applied to the text.

Close

See additional information alongside the content

Geographical Extent: Indicates the geographical area that this provision applies to. For further information see ‘Frequently Asked Questions’.

Show Timeline of Changes: See how this legislation has or could change over time. Turning this feature on will show extra navigation options to go to these specific points in time. Return to the latest available version by using the controls above in the What Version box.

Close

Opening Options

Different options to open legislation in order to view more content on screen at once

Close

Explanatory Memorandum

Explanatory Memorandum sets out a brief statement of the purpose of a Statutory Instrument and provides information about its policy objective and policy implications. They aim to make the Statutory Instrument accessible to readers who are not legally qualified and accompany any Statutory Instrument or Draft Statutory Instrument laid before Parliament from June 2004 onwards.

Close

More Resources

Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:

  • the original print PDF of the as enacted version that was used for the print copy
  • lists of changes made by and/or affecting this legislation item
  • confers power and blanket amendment details
  • all formats of all associated documents
  • correction slips
  • links to related legislation and further information resources
Close

Timeline of Changes

This timeline shows the different points in time where a change occurred. The dates will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. The first date in the timeline will usually be the earliest date when the provision came into force. In some cases the first date is 01/02/1991 (or for Northern Ireland legislation 01/01/2006). This date is our basedate. No versions before this date are available. For further information see the Editorial Practice Guide and Glossary under Help.

Close

More Resources

Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:

  • the original print PDF of the as made version that was used for the print copy
  • correction slips

Click 'View More' or select 'More Resources' tab for additional information including:

  • lists of changes made by and/or affecting this legislation item
  • confers power and blanket amendment details
  • all formats of all associated documents
  • links to related legislation and further information resources