Data Protection Act 2018

Data Protection Act 2018 is up to date with all changes known to be in force on or before 18 September 2024. There are changes that may be brought into force at a future date.

Changes to Legislation

Revised legislation carried on this site may not be fully up to date. Changes and effects are recorded by our editorial team in lists which can be found in the ‘Changes to Legislation’ area. Where those effects have yet to be applied to the text of the legislation by the editorial team they are also listed alongside the affected provisions when you open the content using the Table of Contents below.

Changes and effects yet to be applied to :

Sch. 3 para. 8(1)(q)(ii) words substituted by 2022 c. 18 (N.I.)Sch. 3para. 78(2)(a)
Sch. 3 para. 8(1)(q)(ii) words substituted by 2022 c. 18 (N.I.)Sch. 3para. 78(2)(b)
Sch. 3 para. 2(1) words substituted by 2023 c. 48s. 2(1)(l)
Sch. 4 para. 3(4)(a) substututed by 2022 c. 18 (N.I.)Sch. 3para. 79(2)
Sch. 4 para. 5(4)(a) words substituted by 2022 c. 18 (N.I.)Sch. 3para. 79(3)(a)
Sch. 4 para. 5(4)(a) words substituted by 2022 c. 18 (N.I.)Sch. 3para. 79(3)(b)

Changes and effects yet to be applied to the whole Act associated Parts and Chapters:

Whole provisions yet to be inserted into this Act (including any effects on those provisions):

s. 13A inserted by 2024 c. 21s. 31(4)
s. 204(1)(l) inserted by S.I. 2024/374Sch. 5para. 7
Sch. 3 para. 8(1)(y) added by 2022 c. 18 (N.I.)Sch. 3para. 78(3)

Information:

You searched for provisions that are applicable to Scotland. The matching provisions are highlighted below. Where no highlighting is shown the matching result may be contained within a footnote.

Introductory TextNext Match
PART 1 PreliminaryPrevious MatchNext Match
1. 1.OverviewPrevious MatchNext Match
2. 2.Protection of personal dataPrevious MatchNext Match
3. 3.Terms relating to the processing of personal dataPrevious MatchNext Match
1. CHAPTER 1 Scope and definitionsPrevious MatchNext Match
  1. 4.Processing to which this Part appliesPrevious MatchNext Match
  2. 5.DefinitionsPrevious MatchNext Match
  1. Meaning of certain terms used in the UK GDPRPrevious MatchNext Match
    1. 6.Meaning of “controller”Previous MatchNext Match
    2. 7.Meaning of “public authority” and “public body”Previous MatchNext Match
    1. 8.Lawfulness of processing: public interest etcPrevious MatchNext Match
    2. 9.Child's consent in relation to information society servicesPrevious MatchNext Match
    1. 10.Special categories of personal data and criminal convictions etc dataPrevious MatchNext Match
    2. 11.Special categories of personal data etc: supplementaryPrevious MatchNext Match
    1. 12.Limits on fees that may be charged by controllersPrevious MatchNext Match
    2. 13.Obligations of credit reference agenciesPrevious MatchNext Match
    3. 14.Automated decision-making authorised by law: safeguardsPrevious MatchNext Match
    1. 15.Exemptions etcPrevious MatchNext Match
    2. 16.Power to make further exemptions etc by regulationsPrevious MatchNext Match
    1. 17.Accreditation of certification providersPrevious MatchNext Match
    1. 17A.Transfers based on adequacy regulationsPrevious MatchNext Match
    2. 17B.Transfers based on adequacy regulations: review etcPrevious MatchNext Match
    3. 17C.Standard data protection clausesPrevious MatchNext Match
    4. 18.Transfers of personal data to third countries etc : public interestPrevious MatchNext Match
    1. 19.Processing for archiving, research and statistical purposes: safeguardsPrevious MatchNext Match
    1. 20.Meaning of “court”Previous MatchNext Match
    1. DefinitionsPrevious MatchNext Match
      1. 21.DefinitionsPrevious MatchNext Match
      1. 22.Application of the GDPR to processing to which this Chapter appliesPrevious MatchNext Match
      2. 23.Power to make provision in consequence of regulations related to the GDPRPrevious MatchNext Match
      1. 24.Manual unstructured data held by FOI public authoritiesPrevious MatchNext Match
      2. 25.Manual unstructured data used in longstanding historical researchPrevious MatchNext Match
      3. 26.National security and defence exemptionPrevious MatchNext Match
      4. 27.National security: certificatePrevious MatchNext Match
      5. 28.National security and defence: modifications to Articles 9 and 32 of the UK GDPRPrevious MatchNext Match
      1. CHAPTER 1 Scope and definitionsPrevious MatchNext Match
        
        ScopePrevious MatchNext Match
        
        29.Processing to which this Part appliesPrevious MatchNext Match
        
        30.Meaning of “competent authority”Previous MatchNext Match
        
        31.“The law enforcement purposes”Previous MatchNext Match
        
        32.Meaning of “controller” and “processor”Previous MatchNext Match
        
        33.Other definitionsPrevious MatchNext Match
        
        34.Overview and general duty of controllerPrevious MatchNext Match
        
        35.The first data protection principlePrevious MatchNext Match
        
        36.The second data protection principlePrevious MatchNext Match
        
        37.The third data protection principlePrevious MatchNext Match
        
        38.The fourth data protection principlePrevious MatchNext Match
        
        39.The fifth data protection principlePrevious MatchNext Match
        
        40.The sixth data protection principlePrevious MatchNext Match
        
        41.Safeguards: archivingPrevious MatchNext Match
        
        42.Safeguards: sensitive processingPrevious MatchNext Match
        
        Overview and scopePrevious MatchNext Match
        
        43.Overview and scopePrevious MatchNext Match
        
        44.Information: controller's general dutiesPrevious MatchNext Match
        
        45.Right of access by the data subjectPrevious MatchNext Match
        
        46.Right to rectificationPrevious MatchNext Match
        
        47.Right to erasure or restriction of processingPrevious MatchNext Match
        
        48.Rights under section 46 or 47: supplementaryPrevious MatchNext Match
        
        49.Right not to be subject to automated decision-makingPrevious MatchNext Match
        
        50.Automated decision-making authorised by law: safeguardsPrevious MatchNext Match
        
        51.Exercise of rights through the CommissionerPrevious MatchNext Match
        
        52.Form of provision of information etcPrevious MatchNext Match
        
        53.Manifestly unfounded or excessive requests by the data subjectPrevious MatchNext Match
        
        54.Meaning of “applicable time period”Previous MatchNext Match
        
        Overview and scopePrevious MatchNext Match
        
        55.Overview and scopePrevious MatchNext Match
        
        56.General obligations of the controllerPrevious MatchNext Match
        
        57.Data protection by design and defaultPrevious MatchNext Match
        
        58.Joint controllersPrevious MatchNext Match
        
        59.ProcessorsPrevious MatchNext Match
        
        60.Processing under the authority of the controller or processorPrevious MatchNext Match
        
        61.Records of processing activitiesPrevious MatchNext Match
        
        62.LoggingPrevious MatchNext Match
        
        63.Co-operation with the CommissionerPrevious MatchNext Match
        
        64.Data protection impact assessmentPrevious MatchNext Match
        
        65.Prior consultation with the CommissionerPrevious MatchNext Match
        
        66.Security of processingPrevious MatchNext Match
        
        67.Notification of a personal data breach to the CommissionerPrevious MatchNext Match
        
        68.Communication of a personal data breach to the data subjectPrevious MatchNext Match
        
        69.Designation of a data protection officerPrevious MatchNext Match
        
        70.Position of data protection officerPrevious MatchNext Match
        
        71.Tasks of data protection officerPrevious MatchNext Match
        
        Overview and interpretationPrevious MatchNext Match
        
        72.Overview and interpretationPrevious MatchNext Match
        
        73.General principles for transfers of personal dataPrevious MatchNext Match
        
        74.Transfers on the basis of an adequacy decisionPrevious MatchNext Match
        
        74A.Transfers based on adequacy regulationsPrevious MatchNext Match
        
        74B.Transfers based on adequacy regulations: review etcPrevious MatchNext Match
        
        75.Transfers on the basis of appropriate safeguardsPrevious MatchNext Match
        
        76.Transfers on the basis of special circumstancesPrevious MatchNext Match
        
        77.Transfers of personal data to persons other than relevant authoritiesPrevious MatchNext Match
        
        78.Subsequent transfersPrevious MatchNext Match
        
        79.National security: certificatePrevious MatchNext Match
        
        80.Special processing restrictionsPrevious MatchNext Match
        
        81.Reporting of infringementsPrevious MatchNext Match
        
        CHAPTER 1 Scope and definitionsPrevious MatchNext Match
        
        ScopePrevious MatchNext Match
        
        82.Processing to which this Part appliesPrevious MatchNext Match
        
        83.Meaning of “controller” and “processor”Previous MatchNext Match
        
        84.Other definitionsPrevious MatchNext Match
        
        OverviewPrevious MatchNext Match
        
        85.OverviewPrevious MatchNext Match
        
        86.The first data protection principlePrevious MatchNext Match
        
        87.The second data protection principlePrevious MatchNext Match
        
        88.The third data protection principlePrevious MatchNext Match
        
        89.The fourth data protection principlePrevious MatchNext Match
        
        90.The fifth data protection principlePrevious MatchNext Match
        
        91.The sixth data protection principlePrevious MatchNext Match
        
        OverviewPrevious MatchNext Match
        
        92.OverviewPrevious MatchNext Match
        
        93.Right to informationPrevious MatchNext Match
        
        94.Right of accessPrevious MatchNext Match
        
        95.Right of access: supplementaryPrevious MatchNext Match
        
        96.Right not to be subject to automated decision-makingPrevious MatchNext Match
        
        97.Right to intervene in automated decision-makingPrevious MatchNext Match
        
        98.Right to information about decision-makingPrevious MatchNext Match
        
        99.Right to object to processingPrevious MatchNext Match
        
        100.Rights to rectification and erasurePrevious MatchNext Match
        
        OverviewPrevious MatchNext Match
        
        101.OverviewPrevious MatchNext Match
        
        102.General obligations of the controllerPrevious MatchNext Match
        
        103.Data protection by designPrevious MatchNext Match
        
        104.Joint controllersPrevious MatchNext Match
        
        105.ProcessorsPrevious MatchNext Match
        
        106.Processing under the authority of the controller or processorPrevious MatchNext Match
        
        107.Security of processingPrevious MatchNext Match
        
        108.Communication of a personal data breachPrevious MatchNext Match
        
        109.Transfers of personal data outside the United KingdomPrevious MatchNext Match
        
        110.National securityPrevious MatchNext Match
        
        111.National security: certificatePrevious MatchNext Match
        
        112.Other exemptionsPrevious MatchNext Match
        
        113.Power to make further exemptionsPrevious MatchNext Match
        
        The CommissionerPrevious MatchNext Match
        
        114.The Information CommissionerPrevious MatchNext Match
        
        115.General functions under the UK GDPR and safeguardsPrevious MatchNext Match
        
        116.Other general functionsPrevious MatchNext Match
        
        117.Competence in relation to courts etcPrevious MatchNext Match
        
        118.Co-operation between parties to the Data Protection ConventionPrevious MatchNext Match
        
        119.Inspection of personal data in accordance with international obligationsPrevious MatchNext Match
        
        119A.Standard clauses for transfers to third countries etcPrevious MatchNext Match
        
        120.Further international rolePrevious MatchNext Match
        
        121.Data-sharing codePrevious MatchNext Match
        
        122.Direct marketing codePrevious MatchNext Match
        
        123.Age-appropriate design codePrevious MatchNext Match
        
        124.Data protection and journalism codePrevious MatchNext Match
        
        125.Approval of codes prepared under sections 121 to 124Previous MatchNext Match
        
        126.Publication and review of codes issued under section 125(4)Previous MatchNext Match
        
        127.Effect of codes issued under section 125(4)Previous MatchNext Match
        
        128.Other codes of practicePrevious MatchNext Match
        
        129.Consensual auditsPrevious MatchNext Match
        
        130.Records of national security certificatesPrevious MatchNext Match
        
        131.Disclosure of information to the CommissionerPrevious MatchNext Match
        
        132.Confidentiality of informationPrevious MatchNext Match
        
        133.Guidance about privileged communicationsPrevious MatchNext Match
        
        134.Fees for servicesPrevious MatchNext Match
        
        135.Manifestly unfounded or excessive requests by data subjects etcPrevious MatchNext Match
        
        136.Guidance about feesPrevious MatchNext Match
        
        137.Charges payable to the Commissioner by controllersPrevious MatchNext Match
        
        138.Regulations under section 137: supplementaryPrevious MatchNext Match
        
        139.Reporting to ParliamentPrevious MatchNext Match
        
        140.Publication by the CommissionerPrevious MatchNext Match
        
        141.Notices from the CommissionerPrevious MatchNext Match
        
        Information noticesPrevious MatchNext Match
        
        142.Information noticesPrevious MatchNext Match
        
        143.Information notices: restrictionsPrevious MatchNext Match
        
        144.False statements made in response to information noticesPrevious MatchNext Match
        
        145.Information ordersPrevious MatchNext Match
        
        146.Assessment noticesPrevious MatchNext Match
        
        147.Assessment notices: restrictionsPrevious MatchNext Match
        
        148.Destroying or falsifying information and documents etcPrevious MatchNext Match
        
        149.Enforcement noticesPrevious MatchNext Match
        
        150.Enforcement notices: supplementaryPrevious MatchNext Match
        
        151.Enforcement notices: rectification and erasure of personal data etcPrevious MatchNext Match
        
        152.Enforcement notices: restrictionsPrevious MatchNext Match
        
        153.Enforcement notices: cancellation and variationPrevious MatchNext Match
        
        154.Powers of entry and inspectionPrevious MatchNext Match
        
        155.Penalty noticesPrevious MatchNext Match
        
        156.Penalty notices: restrictionsPrevious MatchNext Match
        
        157.Maximum amount of penaltyPrevious MatchNext Match
        
        158.Fixed penalties for non-compliance with charges regulationsPrevious MatchNext Match
        
        159.Amount of penalties: supplementaryPrevious MatchNext Match
        
        160.Guidance about regulatory actionPrevious MatchNext Match
        
        161.Approval of first guidance about regulatory actionPrevious MatchNext Match
        
        162.Rights of appealPrevious MatchNext Match
        
        163.Determination of appealsPrevious MatchNext Match
        
        164.Applications in respect of urgent noticesPrevious MatchNext Match
        
        165.Complaints by data subjectsPrevious MatchNext Match
        
        166.Orders to progress complaintsPrevious MatchNext Match
        
        167.Compliance ordersPrevious MatchNext Match
        
        168.Compensation for contravention of the UK GDPRPrevious MatchNext Match
        
        169.Compensation for contravention of other data protection legislationPrevious MatchNext Match
        
        170.Unlawful obtaining etc of personal dataPrevious MatchNext Match
        
        171.Re-identification of de-identified personal dataPrevious MatchNext Match
        
        172.Re-identification: effectiveness testing conditionsPrevious MatchNext Match
        
        173.Alteration etc of personal data to prevent disclosure to data subjectPrevious MatchNext Match
        
        174.The special purposesPrevious MatchNext Match
        
        175.Provision of assistance in special purposes proceedingsPrevious MatchNext Match
        
        176.Staying special purposes proceedingsPrevious MatchNext Match
        
        177.Guidance about how to seek redress against media organisationsPrevious MatchNext Match
        
        178.Review of processing of personal data for the purposes of journalismPrevious MatchNext Match
        
        179.Effectiveness of the media's dispute resolution proceduresPrevious MatchNext Match
        
        180.JurisdictionPrevious MatchNext Match
        
        181.Interpretation of Part 6Previous MatchNext Match
        
        Regulations under this ActPrevious MatchNext Match
        
        182.Regulations and consultationPrevious MatchNext Match
        
        183.Power to reflect changes to the Data Protection ConventionPrevious MatchNext Match
        
        184.Prohibition of requirement to produce relevant recordsPrevious MatchNext Match
        
        185.Avoidance of certain contractual terms relating to health recordsPrevious MatchNext Match
        
        186.Data subject's rights and other prohibitions and restrictionsPrevious MatchNext Match
        
        187.Representation of data subjects with their authorityPrevious MatchNext Match
        
        188.Representation of data subjects with their authority: collective proceedings
        
        189.Duty to review provision for representation of data subjects
        
        190.Post-review powers to make provision about representation of data subjects
        
        191.Framework for Data Processing by GovernmentPrevious MatchNext Match
        
        192.Approval of the FrameworkPrevious MatchNext Match
        
        193.Publication and review of the FrameworkPrevious MatchNext Match
        
        194.Effect of the FrameworkPrevious MatchNext Match
        
        195.Reserve forces: data-sharing by HMRCPrevious MatchNext Match
        
        196.Penalties for offencesPrevious MatchNext Match
        
        197.ProsecutionPrevious MatchNext Match
        
        198.Liability of directors etcPrevious MatchNext Match
        
        199.Recordable offences
        
        200.Guidance about PACE codes of practicePrevious MatchNext Match
        
        201.Disclosure of information to the TribunalPrevious MatchNext Match
        
        202.Proceedings in the First-tier Tribunal: contemptPrevious MatchNext Match
        
        203.Tribunal Procedure RulesPrevious MatchNext Match
        
        204.Meaning of “health professional” and “social work professional”Previous MatchNext Match
        
        205.General interpretationPrevious MatchNext Match
        
        206.Index of defined expressionsPrevious MatchNext Match
        
        207.Territorial application of this ActPrevious MatchNext Match
        
        208.Children in ScotlandPrevious MatchNext Match
        
        209.Application to the CrownPrevious MatchNext Match
        
        210.Application to ParliamentPrevious MatchNext Match
        
        211.Minor and consequential provisionPrevious MatchNext Match
        
        212.CommencementPrevious MatchNext Match
        
        213.Transitional provisionPrevious MatchNext Match
        
        214.ExtentPrevious MatchNext Match
        
        215.Short titlePrevious MatchNext Match
        
        SCHEDULE 1Previous MatchNext MatchSpecial categories of personal data and criminal convictions etc dataPrevious MatchNext Match
        
        PART 1 Conditions relating to employment, health and research etcPrevious MatchNext Match
        
        Employment, social security and social protectionPrevious MatchNext Match
        
        1.(1) This condition is met if— (a) the processing is.Previous MatchNext Match
        
        2.(1) This condition is met if the processing is necessary.Previous MatchNext Match
        
        3.This condition is met if the processing—Previous MatchNext Match
        
        4.This condition is met if the processing—Previous MatchNext Match
        
        Requirement for an appropriate policy document when relying on conditions in this PartPrevious MatchNext Match
        
        5.(1) Except as otherwise provided, a condition in this Part.Previous MatchNext Match
        
        6.(1) This condition is met if the processing—Previous MatchNext Match
        
        7.This condition is met if the processing is necessary—Previous MatchNext Match
        
        8.(1) This condition is met if the processing—Previous MatchNext Match
        
        9.(1) This condition is met if the processing—Previous MatchNext Match
        
        10.(1) This condition is met if the processing—Previous MatchNext Match
        
        11.(1) This condition is met if the processing—Previous MatchNext Match
        
        12.(1) This condition is met if— (a) the processing is.Previous MatchNext Match
        
        13.(1) This condition is met if— (a) the processing consists.Previous MatchNext Match
        
        14.(1) This condition is met if the processing—Previous MatchNext Match
        
        15.This condition is met if the processing is necessary for.Previous MatchNext Match
        
        16.(1) This condition is met if the processing—Previous MatchNext Match
        
        17.(1) This condition is met if the processing—Previous MatchNext Match
        
        18.(1) This condition is met if— (a) the processing is.Previous MatchNext Match
        
        19.(1) This condition is met if the processing—Previous MatchNext Match
        
        20.(1) This condition is met if the processing—Previous MatchNext Match
        
        21.(1) This condition is met if the processing—Previous MatchNext Match
        
        22.(1) This condition is met if the processing—Previous MatchNext Match
        
        23.(1) This condition is met if— (a) the processing is.Previous MatchNext Match
        
        24.(1) This condition is met if— (a) the processing consists.Previous MatchNext Match
        
        25.(1) This condition is met if— (a) the processing consists.Previous MatchNext Match
        
        26.This condition is met if the processing—Previous MatchNext Match
        
        27.(1) This condition is met if the processing is necessary—.Previous MatchNext Match
        
        28.(1) This condition is met if the processing—Previous MatchNext Match
        
        ConsentPrevious MatchNext Match
        
        29.This condition is met if the data subject has given.Previous MatchNext Match
        
        30.This condition is met if— (a) the processing is necessary.Previous MatchNext Match
        
        31.This condition is met if the processing is carried out—.Previous MatchNext Match
        
        32.This condition is met if the processing relates to personal.Previous MatchNext Match
        
        33.This condition is met if the processing—Previous MatchNext Match
        
        34.This condition is met if the processing is necessary when.Previous MatchNext Match
        
        35.(1) This condition is met if— (a) the processing is.Previous MatchNext Match
        
        36.This condition is met if the processing would meet a.Previous MatchNext Match
        
        37.This condition is met if the processing—Previous MatchNext Match
        
        Application of this Part of this SchedulePrevious MatchNext Match
        
        38.This Part of this Schedule makes provision about the processing.Previous MatchNext Match
        
        39.The controller has an appropriate policy document in place in.Previous MatchNext Match
        
        40.(1) Where personal data is processed in reliance on a.Previous MatchNext Match
        
        41.A record maintained by the controller, or the controller's representative.Previous MatchNext Match
        
        PART 1 Adaptations and restrictions as described in Articles 6(3) and 23(1)Previous MatchNext Match
        
        UK GDPR provisions to be adapted or restricted: “the listed GDPR provisions”Previous MatchNext Match
        
        1.In this Part of this Schedule, “the listed GDPR provisions”.Previous MatchNext Match
        
        2.(1) The listed GDPR provisions and Article 34(1) and (4).Previous MatchNext Match
        
        3.(1) The UK GDPR provisions listed in sub-paragraph (3) do.Previous MatchNext Match
        
        4.(1) The relevant UK GDPR provisions do not apply to.Previous MatchNext Match
        
        4A.(1) A decision under paragraph 4(1) as to whether, and.Previous MatchNext Match
        
        4B.(1) Where the Secretary of State makes a decision mentioned.Previous MatchNext Match
        
        5.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        UK GDPR provisions to be restricted: “the listed GDPR provisions”Previous MatchNext Match
        
        6.In this Part of this Schedule, “the listed GDPR provisions”.Previous MatchNext Match
        
        7.The listed GDPR provisions do not apply to personal data.Previous MatchNext Match
        
        8.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        9.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        10.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        11.The listed GDPR provisions do not apply to personal data.Previous MatchNext Match
        
        12.In the Table in paragraph 11— “ consumer protection enforcer.Previous MatchNext Match
        
        13.The listed GDPR provisions and Article 34(1) and (4) of.Previous MatchNext Match
        
        14.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        15.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        Protection of the rights of others: generalPrevious MatchNext Match
        
        16.(1) Article 15(1) to (3) of the UK GDPR (confirmation.Previous MatchNext Match
        
        17.(1) For the purposes of paragraph 16(2)(b), it is to.Previous MatchNext Match
        
        UK GDPR provisions to be restricted: “the listed GDPR provisions”Previous MatchNext Match
        
        18.In this Part of this Schedule, “the listed GDPR provisions”.Previous MatchNext Match
        
        19.The listed GDPR provisions do not apply to personal data.Previous MatchNext Match
        
        20.(1) A person need not comply with the listed GDPR.Previous MatchNext Match
        
        21.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        22.The listed GDPR provisions do not apply to personal data.Previous MatchNext Match
        
        23.The listed GDPR provisions do not apply to personal data.Previous MatchNext Match
        
        24.The listed GDPR provisions do not apply to personal data.Previous MatchNext Match
        
        25.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        Journalistic, academic, artistic and literary purposesPrevious MatchNext Match
        
        26.(1) In this paragraph, “the special purposes” means one or.Previous MatchNext Match
        
        Research and statisticsPrevious MatchNext Match
        
        27.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        28.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        PART 1 UK GDPR provisions to be restrictedPrevious MatchNext Match
        
        1.In this Schedule “the listed GDPR provisions” means the following.Previous MatchNext Match
        
        DefinitionsPrevious MatchNext Match
        
        2.(1) In this Part of this Schedule— “the appropriate health.Previous MatchNext Match
        
        3.(1) The listed GDPR provisions do not apply to data.Previous MatchNext Match
        
        4.(1) This paragraph applies where a request for data concerning.Previous MatchNext Match
        
        5.(1) Article 15(1) to (3) of the UK GDPR (confirmation.Previous MatchNext Match
        
        6.(1) Article 15(1) to (3) of the UK GDPR (confirmation.Previous MatchNext Match
        
        DefinitionsPrevious MatchNext Match
        
        7.(1) In this Part of this Schedule— “education data” has.Previous MatchNext Match
        
        8.(1) This paragraph applies to personal data falling within any.Previous MatchNext Match
        
        9.(1) The listed GDPR provisions do not apply to data.Previous MatchNext Match
        
        10.(1) This paragraph applies where a request for social work.Previous MatchNext Match
        
        11.Article 15(1) to (3) of the UK GDPR (confirmation of.Previous MatchNext Match
        
        12.(1) This paragraph applies where— (a) a question arises as.Previous MatchNext Match
        
        Educational recordsPrevious MatchNext Match
        
        13.In this Part of this Schedule “educational record” means a.Previous MatchNext Match
        
        14.(1) This paragraph applies to a record of information which—.Previous MatchNext Match
        
        15.(1) This paragraph applies to a record of information which.Previous MatchNext Match
        
        16.(1) This paragraph applies to a record of information which—.Previous MatchNext Match
        
        17.(1) In this Part of this Schedule— “education authority” and.Previous MatchNext Match
        
        18.(1) The listed GDPR provisions do not apply to education.Previous MatchNext Match
        
        19.Article 15(1) to (3) of the UK GDPR (confirmation of.Previous MatchNext Match
        
        20.(1) This paragraph applies where— (a) a question arises as.Previous MatchNext Match
        
        Exemption from Article 15 of the UK GDPR: child abuse dataPrevious MatchNext Match
        
        21.(1) This paragraph applies where a request for child abuse.Previous MatchNext Match
        
        UK GDPR provisions to be restricted: “the listed GDPR provisions”Previous MatchNext Match
        
        1.In this Schedule “the listed GDPR provisions” means the following.Previous MatchNext Match
        
        2.The listed GDPR provisions do not apply to personal data.Previous MatchNext Match
        
        3.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        4.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        5.(1) The listed GDPR provisions do not apply to personal.Previous MatchNext Match
        
        6.The listed GDPR provisions do not apply to personal data.Previous MatchNext Match
        
        IntroductionPrevious MatchNext Match
        
        1.(1) This Schedule applies where— (a) a person (“the applicant”).Previous MatchNext Match
        
        2.(1) The applicant may ask the accreditation authority to review.Previous MatchNext Match
        
        3.(1) If the applicant is dissatisfied with the decision on.Previous MatchNext Match
        
        4.(1) If the applicant makes a request in accordance with.Previous MatchNext Match
        
        5.(1) If the appeal panel considers it necessary, a hearing.Previous MatchNext Match
        
        6.(1) The appeal panel must, before the end of the.Previous MatchNext Match
        
        7.In this Schedule, “working day” means any day other than—.Previous MatchNext Match
        
        PART 1 Modifications to the GDPRPrevious MatchNext Match
        
        IntroductoryPrevious MatchNext Match
        
        1.In its application by virtue of section 22(1), the GDPR.Previous MatchNext Match
        
        2.(1) References to “this Regulation” and to provisions of the.Previous MatchNext Match
        
        3.(1) References to “Union law”, “Member State law”, “the law.Previous MatchNext Match
        
        4.(1) References to “the Union”, “a Member State” and “Member.Previous MatchNext Match
        
        5.(1) References to a “supervisory authority”, a “competent supervisory authority”.Previous MatchNext Match
        
        6.References to “the national parliament” have effect as references to.Previous MatchNext Match
        
        7.For Article 2 (material scope) substitute— This Regulation applies to the processing of personal data to.Previous MatchNext Match
        
        8.For Article 3 substitute— Article 3 Territorial application Subsections (1).Previous MatchNext Match
        
        9.In Article 4 (definitions)— (a) in paragraph (7) (meaning of.Previous MatchNext Match
        
        10.In Article 6 (lawfulness of processing)— (a) omit paragraph 2;.Previous MatchNext Match
        
        11.In Article 8 (conditions applicable to child's consent in relation.Previous MatchNext Match
        
        12.In Article 9 (processing of special categories of personal data)—.Previous MatchNext Match
        
        13.In Article 10 (processing of personal data relating to criminal.Previous MatchNext Match
        
        14.In Article 12 (transparent information etc for the exercise of.Previous MatchNext Match
        
        15.In Article 13 (personal data collected from data subject: information.Previous MatchNext Match
        
        16.In Article 14 (personal data collected other than from data.Previous MatchNext Match
        
        17.In Article 17 (right to erasure (‘right to be forgotten’))—.Previous MatchNext Match
        
        18.In Article 18 (right to restriction of processing), in paragraph.Previous MatchNext Match
        
        19.In Article 21 (right to object), in paragraph 5, omit.Previous MatchNext Match
        
        20.In Article 22 (automated individual decision-making, including profiling), for paragraph.Previous MatchNext Match
        
        21.In Article 23 (restrictions), in paragraph 1—Previous MatchNext Match
        
        22.In Article 26 (joint controllers), in paragraph 1, for “Union.Previous MatchNext Match
        
        23.Omit Article 27 (representatives of controllers or processors not established.Previous MatchNext Match
        
        24.In Article 28 (processor)— (a) in paragraph 3, in point.Previous MatchNext Match
        
        25.In Article 30 (records of processing activities)—Previous MatchNext Match
        
        26.In Article 31 (co-operation with the supervisory authority), omit “and.Previous MatchNext Match
        
        27.In Article 35 (data protection impact assessment), omit paragraphs 4.Previous MatchNext Match
        
        28.In Article 36 (prior consultation)— (a) for paragraph 4 substitute—.Previous MatchNext Match
        
        29.In Article 37 (designation of data protection officers), omit paragraph.Previous MatchNext Match
        
        30.In Article 39 (tasks of the data protection officer), in.Previous MatchNext Match
        
        31.In Article 40 (codes of conduct)— (a) in paragraph 1.Previous MatchNext Match
        
        32.In Article 41 (monitoring of approved codes of conduct), omit.Previous MatchNext Match
        
        33.In Article 42 (certification)— (a) in paragraph 1—Previous MatchNext Match
        
        34.In Article 43 (certification bodies)— (a) in paragraph 1, in.Previous MatchNext Match
        
        35.In Article 45 (transfers on the basis of an adequacy.Previous MatchNext Match
        
        36.In Article 46 (transfers subject to appropriate safeguards)—Previous MatchNext Match
        
        37.In Article 47 (binding corporate rules)— (a) in paragraph 1.Previous MatchNext Match
        
        38.In Article 49 (derogations for specific situations)—Previous MatchNext Match
        
        39.In Article 50 (international co-operation for the protection of personal.Previous MatchNext Match
        
        40.In Article 51 (supervisory authority)— (a) in paragraph 1—Previous MatchNext Match
        
        41.In Article 52 (independence)— (a) in paragraph 2—Previous MatchNext Match
        
        42.Omit Article 53 (general conditions for the members of the.Previous MatchNext Match
        
        43.Omit Article 54 (rules on the establishment of the supervisory.Previous MatchNext Match
        
        44.In Article 55 (competence)— (a) in paragraph 1, omit “on.Previous MatchNext Match
        
        45.Omit Article 56 (competence of the lead supervisory authority).Previous MatchNext Match
        
        46.In Article 57 (tasks)— (a) in paragraph 1, in the.Previous MatchNext Match
        
        47.In Article 58 (powers)— (a) in paragraph 1, in point.Previous MatchNext Match
        
        48.In Article 59 (activity reports)— (a) for “, the government.Previous MatchNext Match
        
        49.For Articles 60 to 76 substitute— Article 61 Co-operation with.Previous MatchNext Match
        
        50.In Article 77 (right to lodge a complaint with a.Previous MatchNext Match
        
        51.In Article 78 (right to an effective judicial remedy against.Previous MatchNext Match
        
        52.In Article 79 (right to an effective judicial remedy against.Previous MatchNext Match
        
        53.In Article 80 (representation of data subjects)—Previous MatchNext Match
        
        54.Omit Article 81 (suspension of proceedings).Previous MatchNext Match
        
        55.In Article 82 (right to compensation and liability), for paragraph.Previous MatchNext Match
        
        56.In Article 83 (general conditions for imposing administrative fines)—Previous MatchNext Match
        
        57.In Article 84 (penalties)— (a) for paragraph 1 substitute— The rules on other penalties applicable to infringements of this.Previous MatchNext Match
        
        58.In Article 85 (processing and freedom of expression and information)—.Previous MatchNext Match
        
        59.In Article 86 (processing and public access to official documents).Previous MatchNext Match
        
        60.Omit Article 87 (processing of national identification number).Previous MatchNext Match
        
        61.Omit Article 88 (processing in the context of employment).Previous MatchNext Match
        
        62.In Article 89 (safeguards and derogations relating to processing for.Previous MatchNext Match
        
        63.Omit Article 90 (obligations of secrecy).Previous MatchNext Match
        
        64.Omit Article 91 (existing data protection rules of churches and.Previous MatchNext Match
        
        65.Omit Article 92 (exercise of the delegation).Previous MatchNext Match
        
        66.Omit Article 93 (committee procedure).Previous MatchNext Match
        
        67.Omit Article 94 (repeal of Directive 95/46/EC).Previous MatchNext Match
        
        68.Omit Article 95 (relationship with Directive 2002/58/EC).Previous MatchNext Match
        
        69.In Article 96 (relationship with previously concluded Agreements), for “by.Previous MatchNext Match
        
        70.Omit Article 97 (Commission reports).Previous MatchNext Match
        
        71.Omit Article 98 (Commission reviews).Previous MatchNext Match
        
        72.Omit Article 99 (entry into force and application).Previous MatchNext Match
        
        IntroductoryPrevious MatchNext Match
        
        73.In its application by virtue of section 22(2), Chapter 2.Previous MatchNext Match
        
        74.(1) References to Chapter 2 of Part 2 and the.Previous MatchNext Match
        
        75.In section 16 (power to make further exemptions etc by.Previous MatchNext Match
        
        1.Any United Kingdom government department other than a non-ministerial government.Previous MatchNext Match
        
        2.The Scottish Ministers.Previous MatchNext Match
        
        3.Any Northern Ireland department.Previous MatchNext Match
        
        4.The Welsh Ministers.Previous MatchNext Match
        
        Chief officers of police and other policing bodiesPrevious MatchNext Match
        
        5.The chief constable of a police force maintained under section.Previous MatchNext Match
        
        6.The Commissioner of Police of the Metropolis.Previous MatchNext Match
        
        7.The Commissioner of Police for the City of London.Previous MatchNext Match
        
        8.The Chief Constable of the Police Service of Northern Ireland.Previous MatchNext Match
        
        9.The chief constable of the Police Service of Scotland.Previous MatchNext Match
        
        10.The chief constable of the British Transport Police.Previous MatchNext Match
        
        11.The chief constable of the Civil Nuclear Constabulary.Previous MatchNext Match
        
        12.The chief constable of the Ministry of Defence Police.Previous MatchNext Match
        
        13.The Provost Marshal of the Royal Navy Police.Previous MatchNext Match
        
        14.The Provost Marshal of the Royal Military Police.Previous MatchNext Match
        
        15.The Provost Marshal of the Royal Air Force Police.Previous MatchNext Match
        
        15A.The Provost Marshal for serious crime.Previous MatchNext Match
        
        16.The chief officer of— (a) a body of constables appointed.Previous MatchNext Match
        
        17.A body established in accordance with a collaboration agreement under.Previous MatchNext Match
        
        18.The Director General of the Independent Office for Police Conduct.Previous MatchNext Match
        
        18A.The Service Police Complaints Commissioner.Previous MatchNext Match
        
        19.The Police Investigations and Review Commissioner.Previous MatchNext Match
        
        20.The Police Ombudsman for Northern Ireland.Previous MatchNext Match
        
        21.The Commissioners for Her Majesty's Revenue and Customs.Previous MatchNext Match
        
        22.The Welsh Revenue Authority.Previous MatchNext Match
        
        23.Revenue Scotland.Previous MatchNext Match
        
        24.The Director General of the National Crime Agency.Previous MatchNext Match
        
        25.The Director of the Serious Fraud Office.Previous MatchNext Match
        
        26.The Director of Border Revenue.Previous MatchNext Match
        
        27.The Financial Conduct Authority.Previous MatchNext Match
        
        28.The Health and Safety Executive.Previous MatchNext Match
        
        29.The Competition and Markets Authority.Previous MatchNext Match
        
        30.The Gas and Electricity Markets Authority.Previous MatchNext Match
        
        31.The Food Standards Agency.Previous MatchNext Match
        
        32.Food Standards Scotland.Previous MatchNext Match
        
        33.Her Majesty's Land Registry.Previous MatchNext Match
        
        34.The Criminal Cases Review Commission.Previous MatchNext Match
        
        35.The Scottish Criminal Cases Review Commission.Previous MatchNext Match
        
        36.A provider of probation services (other than the Secretary of.Previous MatchNext Match
        
        37.The Youth Justice Board for England and Wales.Previous MatchNext Match
        
        38.The Parole Board for England and Wales.Previous MatchNext Match
        
        39.The Parole Board for Scotland.Previous MatchNext Match
        
        40.The Parole Commissioners for Northern Ireland.Previous MatchNext Match
        
        41.The Probation Board for Northern Ireland.Previous MatchNext Match
        
        42.The Prisoner Ombudsman for Northern Ireland.Previous MatchNext Match
        
        43.A person who has entered into a contract for the.Previous MatchNext Match
        
        44.A person who has entered into a contract with the.Previous MatchNext Match
        
        45.A person who is, under or by virtue of any.Previous MatchNext Match
        
        46.A youth offending team established under section 39 of the.Previous MatchNext Match
        
        47.The Director of Public Prosecutions.Previous MatchNext Match
        
        48.The Director of Public Prosecutions for Northern Ireland.Previous MatchNext Match
        
        49.The Lord Advocate.Previous MatchNext Match
        
        50.A Procurator Fiscal.Previous MatchNext Match
        
        51.The Director of Service Prosecutions.Previous MatchNext Match
        
        52.The Information Commissioner.Previous MatchNext Match
        
        53.The Scottish Information Commissioner.Previous MatchNext Match
        
        54.The Scottish Courts and Tribunal Service.Previous MatchNext Match
        
        55.The Crown agent.Previous MatchNext Match
        
        56.A court or tribunal.Previous MatchNext Match
        
        Statutory etc purposesPrevious MatchNext Match
        
        1.This condition is met if the processing—Previous MatchNext Match
        
        2.This condition is met if the processing is necessary for.Previous MatchNext Match
        
        3.This condition is met if the processing is necessary to.Previous MatchNext Match
        
        4.(1) This condition is met if— (a) the processing is.Previous MatchNext Match
        
        5.This condition is met if the processing relates to personal.Previous MatchNext Match
        
        6.This condition is met if the processing—Previous MatchNext Match
        
        7.This condition is met if the processing is necessary when.Previous MatchNext Match
        
        8.(1) This condition is met if the processing—Previous MatchNext Match
        
        9.This condition is met if the processing is necessary—Previous MatchNext Match
        
        1.The data subject has given consent to the processing.Previous MatchNext Match
        
        2.The processing is necessary— (a) for the performance of a.Previous MatchNext Match
        
        3.The processing is necessary for compliance with a legal obligation.Previous MatchNext Match
        
        4.The processing is necessary in order to protect the vital.Previous MatchNext Match
        
        5.The processing is necessary— (a) for the administration of justice.Previous MatchNext Match
        
        6.(1) The processing is necessary for the purposes of legitimate.Previous MatchNext Match
        
        Consent to particular processingPrevious MatchNext Match
        
        1.The data subject has given consent to the processing.Previous MatchNext Match
        
        2.The processing is necessary for the purposes of exercising or.Previous MatchNext Match
        
        3.The processing is necessary— (a) in order to protect the.Previous MatchNext Match
        
        4.(1) This condition is met if— (a) the processing is.Previous MatchNext Match
        
        5.The information contained in the personal data has been made.Previous MatchNext Match
        
        6.The processing— (a) is necessary for the purpose of, or.Previous MatchNext Match
        
        7.The processing is necessary— (a) for the administration of justice.Previous MatchNext Match
        
        8.(1) The processing is necessary for medical purposes and is.Previous MatchNext Match
        
        9.(1) The processing— (a) is of sensitive personal data consisting.Previous MatchNext Match
        
        PreliminaryPrevious MatchNext Match
        
        1.In this Schedule, “the listed provisions” means—Previous MatchNext Match
        
        2.The listed provisions do not apply to personal data processed.Previous MatchNext Match
        
        3.(1) The listed provisions do not apply to personal data.Previous MatchNext Match
        
        4.The listed provisions do not apply to personal data where.Previous MatchNext Match
        
        5.The listed provisions do not apply to personal data to.Previous MatchNext Match
        
        6.The listed provisions do not apply to personal data processed.Previous MatchNext Match
        
        7.The listed provisions do not apply to personal data to.Previous MatchNext Match
        
        8.The listed provisions do not apply to personal data to.Previous MatchNext Match
        
        9.The listed provisions do not apply to personal data that.Previous MatchNext Match
        
        10.The listed provisions do not apply to personal data that.Previous MatchNext Match
        
        11.The listed provisions do not apply to personal data consisting.Previous MatchNext Match
        
        12.(1) The listed provisions do not apply to personal data.Previous MatchNext Match
        
        13.(1) The listed provisions do not apply to personal data.Previous MatchNext Match
        
        14.(1) The listed provisions do not apply to personal data.Previous MatchNext Match
        
        Status and capacityPrevious MatchNext Match
        
        1.(1) The Commissioner is to continue to be a corporation.Previous MatchNext Match
        
        2.(1) The Commissioner is to be appointed by Her Majesty.Previous MatchNext Match
        
        3.(1) The Commissioner may be relieved of office by Her.Previous MatchNext Match
        
        4.(1) The Commissioner is to be paid such salary as.Previous MatchNext Match
        
        5.(1) The Commissioner— (a) must appoint one or more deputy.Previous MatchNext Match
        
        6.(1) The functions of the Commissioner are to be carried.Previous MatchNext Match
        
        7.The application of the seal of the Commissioner is to.
        
        8.A document purporting to be an instrument issued by the.
        
        9.The Secretary of State may make payments to the Commissioner.Previous MatchNext Match
        
        10.(1) All fees, charges, penalties and other sums received by.Previous MatchNext Match
        
        11.(1) The Commissioner must— (a) keep proper accounts and other.Previous MatchNext Match
        
        12.Paragraphs 1(1), 7 and 8 do not extend to Scotland.Previous MatchNext Match
        
        General tasksPrevious MatchNext Match
        
        1.(1) The Commissioner must— (a) monitor and enforce Parts 3.Previous MatchNext Match
        
        2.The Commissioner has the following investigative, corrective, authorisation and advisory.Previous MatchNext Match
        
        3.In this Schedule— “foreign designated authority” means an authority designated.Previous MatchNext Match
        
        PART 1 Law Enforcement DirectivePrevious MatchNext Match
        
        Co-operationPrevious MatchNext Match
        
        1.(1) The Commissioner may provide information or assistance to an.Previous MatchNext Match
        
        2.(1) This paragraph applies where the Commissioner receives a request.Previous MatchNext Match
        
        3.(1) Subject to sub-paragraph (2), any information or assistance that.Previous MatchNext Match
        
        4.Where the Commissioner receives information from an LED supervisory authority.Previous MatchNext Match
        
        5.In this Part of this Schedule, “LED supervisory authority” means.Previous MatchNext Match
        
        Co-operation between the Commissioner and foreign designated authoritiesPrevious MatchNext Match
        
        6.(1) The Commissioner must, at the request of a foreign.Previous MatchNext Match
        
        7.(1) This paragraph applies where a request for assistance in.Previous MatchNext Match
        
        8.(1) This paragraph applies where a request for assistance in.Previous MatchNext Match
        
        9.Where the Commissioner receives information from a foreign designated authority.Previous MatchNext Match
        
        10.In this Part of this Schedule, “foreign designated authority” means.Previous MatchNext Match
        
        Issue of warrants in connection with non-compliance and offencesPrevious MatchNext Match
        
        1.(1) This paragraph applies if a judge of the High.Previous MatchNext Match
        
        2.(1) This paragraph applies if a judge of the High.Previous MatchNext Match
        
        3.A judge must not issue a warrant under this Schedule.Previous MatchNext Match
        
        4.(1) A judge must not issue a warrant under this.Previous MatchNext Match
        
        5.(1) A warrant issued under this Schedule must authorise the.Previous MatchNext Match
        
        6.A judge who issues a warrant under this Schedule must—.Previous MatchNext Match
        
        7.A person executing a warrant issued under this Schedule may.Previous MatchNext Match
        
        8.A warrant issued under this Schedule may be executed only.Previous MatchNext Match
        
        9.(1) If an occupier of the premises in respect of.Previous MatchNext Match
        
        10.(1) This paragraph applies where a person executing a warrant.Previous MatchNext Match
        
        11.(1) The powers of inspection and seizure conferred by a.Previous MatchNext Match
        
        12.The powers of inspection and seizure conferred by a warrant.Previous MatchNext Match
        
        13.(1) This paragraph applies if a person in occupation of.Previous MatchNext Match
        
        14.(1) Where a warrant issued under this Schedule is executed—.Previous MatchNext Match
        
        15.(1) It is an offence for a person—Previous MatchNext Match
        
        16.(1) An explanation given, or information provided, by a person.Previous MatchNext Match
        
        17.In this Schedule— (a) “premises” includes a vehicle, vessel or.Previous MatchNext Match
        
        18.In the application of this Schedule to Scotland—Previous MatchNext Match
        
        19.In the application of this Schedule to Northern Ireland—Previous MatchNext Match
        
        Meaning of “penalty”Previous MatchNext Match
        
        1.In this Schedule, “penalty” means a penalty imposed by a.Previous MatchNext Match
        
        2.(1) Before giving a person a penalty notice, the Commissioner.Previous MatchNext Match
        
        3.(1) A notice of intent must contain the following information—.Previous MatchNext Match
        
        4.(1) The Commissioner may not give a penalty notice before.Previous MatchNext Match
        
        5.(1) A penalty notice must contain the following information—Previous MatchNext Match
        
        6.(1) A penalty must be paid to the Commissioner within.Previous MatchNext Match
        
        7.(1) The Commissioner may vary a penalty notice by giving.Previous MatchNext Match
        
        8.(1) The Commissioner may cancel a penalty notice by giving.Previous MatchNext Match
        
        9.(1) The Commissioner must not take action to recover a.Previous MatchNext Match
        
        InterpretationPrevious MatchNext Match
        
        1.In this Schedule— “relevant period” means— the period of 18.Previous MatchNext Match
        
        2.(1) This paragraph applies where the Commissioner gives an information.Previous MatchNext Match
        
        3.(1) Sub-paragraph (2) applies where the Commissioner gives an assessment.Previous MatchNext Match
        
        4.Section 164 applies where an information notice or assessment notice.Previous MatchNext Match
        
        Relevant recordsPrevious MatchNext Match
        
        1.(1) In section 184, “relevant record” means—Previous MatchNext Match
        
        2.“Relevant health record” means a health record which has been.Previous MatchNext Match
        
        3.(1) “Relevant record relating to a conviction or caution” means.Previous MatchNext Match
        
        4.(1) “Relevant record relating to statutory functions” means a record.Previous MatchNext Match
        
        5.In this Schedule, “data subject access right” means a right.Previous MatchNext Match
        
        6.For the purposes of this Schedule, a record which states.Previous MatchNext Match
        
        7.(1) The Secretary of State may by regulations amend this.Previous MatchNext Match
        
        PART 1 Amendments of primary legislationPrevious MatchNext Match
        
        Registration Service Act 1953 (c. 37)Previous MatchNext Match
        
        1.(1) Section 19AC of the Registration Service Act 1953 (codes.Previous MatchNext Match
        
        2.(1) Section 1A of the Veterinary Surgeons Act 1966 (functions.Previous MatchNext Match
        
        3.In section 11AA(1) of the Parliamentary Commissioner Act 1967 (disclosure.Previous MatchNext Match
        
        4.The Local Government Act 1974 is amended as follows.Previous MatchNext Match
        
        5.In section 33A(1) (disclosure of information by Local Commissioner to.Previous MatchNext Match
        
        6.In section 34O(1) (disclosure of information by Local Commissioner to.Previous MatchNext Match
        
        7.The Consumer Credit Act 1974 is amended as follows.Previous MatchNext Match
        
        8.In section 157(2A) (duty to disclose name etc of agency)—.Previous MatchNext Match
        
        9.In section 159(1)(a) (correction of wrong information) for “section 7.Previous MatchNext Match
        
        10.In section 189(1) (definitions), at the appropriate place insert— “the.Previous MatchNext Match
        
        11.The Pharmacy (Northern Ireland) Order 1976 is amended as follows.Previous MatchNext Match
        
        12.In article 2(2) (interpretation), omit the definition of “Directive 95/46/EC”.Previous MatchNext Match
        
        13.In article 8D (European professional card), after paragraph (3) insert—.Previous MatchNext Match
        
        14.In article 22A(6) (Directive 2005/36/EC: functions of competent authority etc.).Previous MatchNext Match
        
        15.(1) Schedule 2C (Directive 2005/36/EC: European professional card) is amended.Previous MatchNext Match
        
        16.(1) The table in Schedule 2D (functions of the Society.Previous MatchNext Match
        
        17.(1) Paragraph 2 of Schedule 3 (fitness to practice: disclosure.Previous MatchNext Match
        
        18.(1) Schedule 2 to the Representation of the People Act.Previous MatchNext Match
        
        19.The Medical Act 1983 is amended as follows.Previous MatchNext Match
        
        20.(1) Section 29E (evidence) is amended as follows.Previous MatchNext Match
        
        21.(1) Section 35A (General Medical Council's power to require disclosure.Previous MatchNext Match
        
        22.In section 49B(7) (Directive 2005/36: designation of competent authority etc.).Previous MatchNext Match
        
        23.In section 55(1) (interpretation), omit the definition of “Directive 95/46/EC”.Previous MatchNext Match
        
        24.(1) Paragraph 9B of Schedule 1 (incidental powers of the.Previous MatchNext Match
        
        25.(1) Paragraph 5A of Schedule 4 (professional performance assessments and.Previous MatchNext Match
        
        26.(1) The table in Schedule 4A (functions of the General.Previous MatchNext Match
        
        27.The Dentists Act 1984 is amended as follows.Previous MatchNext Match
        
        28.(1) Section 33B (the General Dental Council's power to require.Previous MatchNext Match
        
        29.In section 36ZA(6) (Directive 2005/36: designation of competent authority etc).Previous MatchNext Match
        
        30.(1) Section 36Y (the General Dental Council's power to require.Previous MatchNext Match
        
        31.In section 53(1) (interpretation), omit the definition of “Directive 95/46/EC”.Previous MatchNext Match
        
        32.(1) The table in Schedule 4ZA (Directive 2005/36: functions of.Previous MatchNext Match
        
        33.In section 449(11) of the Companies Act 1985 (provision for.Previous MatchNext Match
        
        34.In section 2(1) of the Access to Medical Reports Act.Previous MatchNext Match
        
        35.(1) Section 13B of the Opticians Act 1989 (the Council's.Previous MatchNext Match
        
        36.The Access to Health Records Act 1990 is amended as.Previous MatchNext Match
        
        37.For section 2 substitute— Health professionals In this Act, “health professional” has the same meaning as.Previous MatchNext Match
        
        38.(1) Section 3 (right of access to health records) is.Previous MatchNext Match
        
        39.(1) Section 33D of the Human Fertilisation and Embryology Act.Previous MatchNext Match
        
        40.(1) Section 251B of the Trade Union and Labour Relations.Previous MatchNext Match
        
        41.In the table in Part 1 of Schedule 1 to.Previous MatchNext Match
        
        42.(1) Article 90B of the Industrial Relations (Northern Ireland) Order.Previous MatchNext Match
        
        43.In section 18A(1) of the Health Service Commissioners Act 1993.Previous MatchNext Match
        
        44.The Data Protection Act 1998 is repealed, with the exception.Previous MatchNext Match
        
        45.In section 17A(4) of the Crime and Disorder Act 1998.Previous MatchNext Match
        
        46.(1) Section 19 of the Food Standards Act 1999 (publication.Previous MatchNext Match
        
        47.(1) Section 13 of the Immigration and Asylum Act 1999.Previous MatchNext Match
        
        48.The Financial Services and Markets Act 2000 is amended as.Previous MatchNext Match
        
        49.In section 86(9) (exempt offers to the public), for “the.Previous MatchNext Match
        
        50.In section 391A(6)(b) (publication: special provisions relating to the capital.Previous MatchNext Match
        
        51.In section 391C(7)(a) (publication: special provisions relating to the UCITS.Previous MatchNext Match
        
        52.In section 391D(9)(a) (publication: special provisions relating to the markets.Previous MatchNext Match
        
        53.In section 417 (definitions), at the appropriate place insert— “the.Previous MatchNext Match
        
        54.In section 21F(2)(d) of the Terrorism Act 2000 (other permitted.Previous MatchNext Match
        
        55.The Freedom of Information Act 2000 is amended as follows.Previous MatchNext Match
        
        56.In section 2(3) (absolute exemptions), for paragraph (f) substitute—Previous MatchNext Match
        
        57.In section 18 (the Information Commissioner), omit subsection (1).Previous MatchNext Match
        
        58.(1) Section 40 (personal information) is amended as follows.Previous MatchNext Match
        
        59.Omit section 49 (reports to be laid before Parliament).Previous MatchNext Match
        
        60.For section 61 (appeal proceedings) substitute— Appeal proceedings (1) Tribunal Procedure Rules may make provision for regulating the.Previous MatchNext Match
        
        61.In section 76(1) (disclosure of information between Commissioner and ombudsmen).Previous MatchNext Match
        
        62.After section 76A insert— Disclosure of information to Tribunal (1) No enactment or rule of law prohibiting or restricting.Previous MatchNext Match
        
        63.In section 77(1)(b) (offence of altering etc records with intent.Previous MatchNext Match
        
        64.In section 84 (interpretation), at the appropriate place insert— “the.Previous MatchNext Match
        
        65.(1) Paragraph 28 of Schedule 19C to the Political Parties.Previous MatchNext Match
        
        66.The Public Finance and Accountability (Scotland) Act 2000 is amended.Previous MatchNext Match
        
        67.In section 26B(3)(a) (voluntary disclosure of data to Audit Scotland).Previous MatchNext Match
        
        68.In section 26C(3)(a) (power to require disclosure of data), for.Previous MatchNext Match
        
        69.In section 29(1) (interpretation), at the appropriate place insert— “the.Previous MatchNext Match
        
        70.The Criminal Justice and Police Act 2001 is amended as.Previous MatchNext Match
        
        71.In section 57(1) (retention of seized items)—Previous MatchNext Match
        
        72.In section 65(7) (meaning of “legal privilege”)—Previous MatchNext Match
        
        73.In Schedule 1 (powers of seizure)— (a) omit paragraph 65.Previous MatchNext Match
        
        74.The Anti-terrorism, Crime and Security Act 2001 is amended as.Previous MatchNext Match
        
        75.(1) Section 19 (disclosure of information held by revenue departments).Previous MatchNext Match
        
        76.(1) Part 1 of Schedule 4 (extension of existing disclosure.Previous MatchNext Match
        
        77.(1) Section 7A of the Health and Personal Social Services.Previous MatchNext Match
        
        78.(1) Section 5A of the Justice (Northern Ireland) Act 2002.Previous MatchNext Match
        
        79.The Proceeds of Crime Act 2002 is amended as follows.Previous MatchNext Match
        
        80.In section 333C(2)(d) (other permitted disclosures between institutions etc), for.Previous MatchNext Match
        
        81.In section 436(3)(a) (disclosure of information to certain Directors), for.Previous MatchNext Match
        
        82.In section 438(8)(a) (disclosure of information by certain Directors), for.Previous MatchNext Match
        
        83.In section 439(3)(a) (disclosure of information to Lord Advocate and.Previous MatchNext Match
        
        84.In section 441(7)(a) (disclosure of information by Lord Advocate and.Previous MatchNext Match
        
        85.After section 442 insert— Data protection legislation In this Part, “the data protection legislation” has the same.Previous MatchNext Match
        
        86.(1) Section 237 of the Enterprise Act 2002 (general restriction.Previous MatchNext Match
        
        87.(1) In Schedule 5 to the Scottish Public Services Ombudsman.Previous MatchNext Match
        
        88.The Freedom of Information (Scotland) Act 2002 is amended as.Previous MatchNext Match
        
        89.In section 2(2)(e)(ii) (absolute exemptions), omit “by virtue of subsection.Previous MatchNext Match
        
        90.(1) Section 38 (personal information) is amended as follows.Previous MatchNext Match
        
        91.Schedule 5 to the Courts Act 2003 (collection of fines).Previous MatchNext Match
        
        92.(1) Paragraph 9C (disclosure of information in connection with making.Previous MatchNext Match
        
        93.(1) Paragraph 10A (attachment of earnings orders (Justice Act (Northern.Previous MatchNext Match
        
        94.(1) Section 94 of the Sexual Offences Act 2003 (Part.Previous MatchNext Match
        
        95.The Criminal Justice Act 2003 is amended as follows.Previous MatchNext Match
        
        96.In section 327A(9) (disclosure of information about convictions etc of.Previous MatchNext Match
        
        97.In section 327B (disclosure of information about convictions etc of.Previous MatchNext Match
        
        98.(1) Section 279 of the Mental Health (Care and Treatment).Previous MatchNext Match
        
        99.(1) Section 64C of the Public Audit (Wales) Act 2004.Previous MatchNext Match
        
        100.The Companies (Audit, Investigations and Community Enterprise) Act 2004 is.Previous MatchNext Match
        
        101.(1) Section 15A (disclosure of information by tax authorities) is.Previous MatchNext Match
        
        102.(1) Section 15D (permitted disclosure of information obtained under compulsory.Previous MatchNext Match
        
        103.(1) Section 54 of the Domestic Violence, Crime and Victims.Previous MatchNext Match
        
        104.The Children Act 2004 is amended as follows.Previous MatchNext Match
        
        105.(1) Section 12 (information databases) is amended as follows.Previous MatchNext Match
        
        106.(1) Section 29 (information databases: Wales) is amended as follows.Previous MatchNext Match
        
        107.(1) Section 107 of the Constitutional Reform Act 2005 (disclosure.Previous MatchNext Match
        
        108.In section 64 of the Mental Capacity Act 2005 (interpretation).Previous MatchNext Match
        
        109.(1) Section 34X of the Public Services Ombudsman (Wales) Act.Previous MatchNext Match
        
        110.(1) Section 22 of the Commissioners for Revenue and Customs.Previous MatchNext Match
        
        111.(1) Section 352 of the Gambling Act 2005 (data protection).Previous MatchNext Match
        
        112.(1) Section 18 of the Commissioner for Older People (Wales).Previous MatchNext Match
        
        113.The National Health Service Act 2006 is amended as follows.Previous MatchNext Match
        
        114.(1) Section 251 (control of patient information) is amended as.Previous MatchNext Match
        
        115.(1) Section 264C (provision and disclosure of information about health.Previous MatchNext Match
        
        116.In paragraph 7B(3) of Schedule 1 (further provision about the.Previous MatchNext Match
        
        117.The National Health Service (Wales) Act 2006 is amended as.Previous MatchNext Match
        
        118.(1) Section 201C (provision of information about medical supplies: supplementary).Previous MatchNext Match
        
        119.In paragraph 7B(3) of Schedule 1 (further provision about the.Previous MatchNext Match
        
        120.The Companies Act 2006 is amended as follows.Previous MatchNext Match
        
        121.In section 458(2) (disclosure of information by tax authorities)—Previous MatchNext Match
        
        122.In section 461(7) (permitted disclosure of information obtained under compulsory.Previous MatchNext Match
        
        123.In section 948(9) (restrictions on disclosure) for “the Data Protection.Previous MatchNext Match
        
        124.In section 1173(1) (minor definitions: general), at the appropriate place.Previous MatchNext Match
        
        125.In section 1224A(7) (restrictions on disclosure), for “the Data Protection.Previous MatchNext Match
        
        126.In section 1253D(3) (restriction on transfer of audit working papers.Previous MatchNext Match
        
        127.In section 1261(1) (minor definitions: Part 42), at the appropriate.Previous MatchNext Match
        
        128.In section 1262 (index of defined expressions: Part 42), at.Previous MatchNext Match
        
        129.In Schedule 8 (index of defined expressions: general), at the.Previous MatchNext Match
        
        130.The Tribunals, Courts and Enforcement Act 2007 is amended as.Previous MatchNext Match
        
        131.In section 11(5)(b) (right to appeal to Upper Tribunal), for.Previous MatchNext Match
        
        132.In section 13(8)(a) (right to appeal to the Court of.Previous MatchNext Match
        
        133.The Statistics and Registration Service Act 2007 is amended as.Previous MatchNext Match
        
        134.(1) Section 45 (information held by HMRC) is amended as.Previous MatchNext Match
        
        135.(1) Section 45A (information held by other public authorities) is.Previous MatchNext Match
        
        136.(1) Section 45B(3) (access to information held by Crown bodies.Previous MatchNext Match
        
        137.(1) Section 45C(13) (power to require disclosures by other public.Previous MatchNext Match
        
        138.In section 45D(9)(b) (power to require disclosure by undertakings), for.Previous MatchNext Match
        
        139.(1) Section 45E (further provision about powers in sections 45B.Previous MatchNext Match
        
        140.(1) Section 53A (disclosure by the Statistics Board to devolved.Previous MatchNext Match
        
        141.(1) Section 54 (Data Protection Act 1998 and Human Rights.Previous MatchNext Match
        
        142.In section 67 (general interpretation: Part 1), at the appropriate.Previous MatchNext Match
        
        143.The Serious Crime Act 2007 is amended as follows.Previous MatchNext Match
        
        144.(1) Section 5A (verification and disclosure of information) is amended.Previous MatchNext Match
        
        145.(1) Section 68 (disclosure of information to prevent fraud) is.Previous MatchNext Match
        
        146.(1) Section 85 (disclosure of information by Revenue and Customs).Previous MatchNext Match
        
        147.(1) Section 169 of the Legal Services Act 2007 (disclosure.Previous MatchNext Match
        
        148.In section 74 of the Adoption and Children (Scotland) Act.Previous MatchNext Match
        
        149.The Criminal Justice and Immigration Act 2008 is amended as.Previous MatchNext Match
        
        150.Omit— (a) section 77 (power to alter penalty for unlawfully.Previous MatchNext Match
        
        151.(1) Section 114 (supply of information to Secretary of State.Previous MatchNext Match
        
        152.(1) Section 70 of the Regulatory Enforcement and Sanctions Act.Previous MatchNext Match
        
        153.In section 20A(5) of the Health and Social Care Act.Previous MatchNext Match
        
        154.(1) Section 20 of the Counter-Terrorism Act 2008 (disclosure and.Previous MatchNext Match
        
        155.(1) Section 117 of the Public Health etc. (Scotland) Act.Previous MatchNext Match
        
        156.(1) Section 83ZY of the Banking Act 2009 (special resolution.Previous MatchNext Match
        
        157.(1) Section 19 of the Borders, Citizenship and Immigration Act.Previous MatchNext Match
        
        158.The Marine and Coastal Access Act 2009 is amended as.Previous MatchNext Match
        
        159.(1) Paragraph 13 of Schedule 7 (further provision about civil.Previous MatchNext Match
        
        160.(1) Paragraph 9 of Schedule 10 (further provision about fixed.Previous MatchNext Match
        
        161.In Schedule 21 to the Coroners and Justice Act 2009.Previous MatchNext Match
        
        162.(1) Section 38 of the Broads Authority Act 2009 (provision.Previous MatchNext Match
        
        163.(1) Section 13 of the Health and Social Care (Reform).Previous MatchNext Match
        
        164.(1) Section 25 of the Terrorist Asset-Freezing etc. Act 2010.Previous MatchNext Match
        
        165.(1) Paragraph 12 of Schedule 2 to the Marine (Scotland).Previous MatchNext Match
        
        166.(1) Section 59 of the Charities Act 2011 (disclosure: supplementary).Previous MatchNext Match
        
        167.The Welsh Language (Wales) Measure 2011 is amended as follows.Previous MatchNext Match
        
        168.(1) Section 22 (power to disclose information) is amended as.Previous MatchNext Match
        
        169.(1) Paragraph 8 of Schedule 2 (inquiries by the Commissioner.Previous MatchNext Match
        
        170.(1) Section 10 of the Safeguarding Board Act (Northern Ireland).Previous MatchNext Match
        
        171.The Health and Social Care Act 2012 is amended as.Previous MatchNext Match
        
        172.In section 250(7) (power to publish information standards), for the.Previous MatchNext Match
        
        173.(1) Section 251A (consistent identifiers) is amended as follows.Previous MatchNext Match
        
        174.(1) Section 251B (duty to share information) is amended as.Previous MatchNext Match
        
        175.The Protection of Freedoms Act 2012 is amended as follows.Previous MatchNext Match
        
        176.(1) Section 27 (exceptions and further provision about consent and.Previous MatchNext Match
        
        177.In section 28(1) (interpretation: Chapter 2), for the definition of.Previous MatchNext Match
        
        178.In section 29(7) (code of practice for surveillance camera systems).Previous MatchNext Match
        
        179.(1) Section 14A of the HGV Road User Levy Act.Previous MatchNext Match
        
        180.The Crime and Courts Act 2013 is amended as follows.Previous MatchNext Match
        
        181.(1) Section 42 (other interpretive provisions) is amended as follows.Previous MatchNext Match
        
        182.(1) Paragraph 1 of Schedule 7 (statutory restrictions on disclosure).Previous MatchNext Match
        
        183.(1) Paragraph 8 of Schedule 2 to the Marine Act.Previous MatchNext Match
        
        184.(1) Paragraph 3 of Schedule 9 to the Local Audit.Previous MatchNext Match
        
        185.(1) Paragraph 7 of Schedule 4 to the Anti-social Behaviour.Previous MatchNext Match
        
        186.(1) Paragraph 6 of Schedule 6 to the Immigration Act.Previous MatchNext Match
        
        187.In section 67(9) of the Care Act 2014 (involvement in.Previous MatchNext Match
        
        188.In section 18(10)(b) of the Social Services and Well-being (Wales).Previous MatchNext Match
        
        189.(1) Section 38 of the Counter-Terrorism and Security Act 2015.Previous MatchNext Match
        
        190.(1) Section 6 of the Small Business, Enterprise and Employment.Previous MatchNext Match
        
        191.(1) Section 54A of the Modern Slavery Act 2015 (Gangmasters.Previous MatchNext Match
        
        192.The Human Trafficking and Exploitation (Criminal Justice and Support for.Previous MatchNext Match
        
        193.In section 13(5) (duty to notify National Crime Agency about.Previous MatchNext Match
        
        194.In section 25(1) (interpretation of this Act), at the appropriate.Previous MatchNext Match
        
        195.In paragraph 18(5) of Schedule 3 (supply of information to.Previous MatchNext Match
        
        196.(1) Section 72 of the Justice Act (Northern Ireland) 2015.Previous MatchNext Match
        
        197.(1) Section 7 of the Immigration Act 2016 (information gateways.Previous MatchNext Match
        
        198.The Investigatory Powers Act 2016 is amended as follows.Previous MatchNext Match
        
        199.In section 1(5)(b), for sub-paragraph (ii) substitute—Previous MatchNext Match
        
        200.In section 199 (bulk personal datasets: interpretation), for subsection (2).Previous MatchNext Match
        
        201.In section 202(4) (restriction on use of class BPD warrants).Previous MatchNext Match
        
        202.In section 206 (additional safeguards for health records), for subsection.Previous MatchNext Match
        
        203.(1) Section 237 (information gateway) is amended as follows.Previous MatchNext Match
        
        204.(1) Section 49 of the Police Services Ombudsman Act (Northern.Previous MatchNext Match
        
        205.(1) Section 1 of the Health and Social Care (Control.Previous MatchNext Match
        
        206.In section 306(1) of the Mental Capacity Act (Northern Ireland).Previous MatchNext Match
        
        207.The Justice Act (Northern Ireland) 2016 is amended as follows.Previous MatchNext Match
        
        208.(1) Section 17 (disclosure of information) is amended as follows.Previous MatchNext Match
        
        209.In section 44(3) (disclosure of information)— (a) in paragraph (a).Previous MatchNext Match
        
        210.(1) Section 50 of the Policing and Crime Act 2017.Previous MatchNext Match
        
        211.In Schedule 5 to the Children and Social Work Act.Previous MatchNext Match
        
        212.The Higher Education and Research Act 2017 is amended as.Previous MatchNext Match
        
        213.(1) Section 63 (cooperation and information sharing by the Office.Previous MatchNext Match
        
        214.(1) Section 112 (cooperation and information sharing between the Office.Previous MatchNext Match
        
        215.The Digital Economy Act 2017 is amended as follows.Previous MatchNext Match
        
        216.(1) Section 40 (further provisions about disclosures under sections 35.Previous MatchNext Match
        
        217.(1) Section 43 (codes of practice) is amended as follows.Previous MatchNext Match
        
        218.(1) Section 49 (further provision about disclosures under section 48).Previous MatchNext Match
        
        219.(1) Section 52 (code of practice) is amended as follows.Previous MatchNext Match
        
        220.(1) Section 57 (further provision about disclosures under section 56).Previous MatchNext Match
        
        221.(1) Section 60 (code of practice) is amended as follows.Previous MatchNext Match
        
        222.(1) Section 65 (supplementary provision about disclosures under section 64).Previous MatchNext Match
        
        223.(1) Section 70 (code of practice) is amended as follows.Previous MatchNext Match
        
        224.Omit sections 108 to 110 (charges payable to the Information.Previous MatchNext Match
        
        225.(1) Section 60 of the Landfill Disposals Tax (Wales) Act.Previous MatchNext Match
        
        226.(1) Section 4 of the Additional Learning Needs and Educational.Previous MatchNext Match
        
        227.(1) Section 204 of this Act (meaning of “health professional”.Previous MatchNext Match
        
        Estate Agents (Specified Offences) (No. 2) Order 1991 (S.I. 1991/1091)Previous MatchNext Match
        
        228.In the table in the Schedule to the Estate Agents.Previous MatchNext Match
        
        229.(1) Article 4 of the Channel Tunnel (International Arrangements) Order.Previous MatchNext Match
        
        230.The Access to Health Records (Northern Ireland) Order 1993 is.Previous MatchNext Match
        
        231.In Article 4 (health professionals), for paragraph (1) substitute—Previous MatchNext Match
        
        232.In Article 5(4)(a) (fees for access to health records), for.Previous MatchNext Match
        
        233.In article 4 of the Channel Tunnel (Miscellaneous Provisions) Order.Previous MatchNext Match
        
        234.The European Primary and Specialist Dental Qualifications Regulations 1998 are.Previous MatchNext Match
        
        235.(1) Regulation 2(1) (interpretation) is amended as follows.Previous MatchNext Match
        
        236.(1) The table in Schedule A1 (functions of the GDC.Previous MatchNext Match
        
        237.For article 7 of the Scottish Parliamentary Corporate Body (Crown.Previous MatchNext Match
        
        238.For article 9 of the Northern Ireland Assembly Commission (Crown.Previous MatchNext Match
        
        239.The Data Protection (Corporate Finance Exemption) Order 2000 is revoked.Previous MatchNext Match
        
        240.The Data Protection (Conditions under Paragraph 3 of Part II.Previous MatchNext Match
        
        241.The Data Protection (Functions of Designated Authority) Order 2000 is.Previous MatchNext Match
        
        242.The Data Protection (International Co-operation) Order 2000 is revoked.Previous MatchNext Match
        
        243.The Data Protection (Subject Access) (Fees and Miscellaneous Provisions) Regulations.Previous MatchNext Match
        
        244.In the Consumer Credit (Credit Reference Agency) Regulations 2000, regulation.Previous MatchNext Match
        
        245.The Data Protection (Subject Access Modification) (Health) Order 2000 is.Previous MatchNext Match
        
        246.The Data Protection (Subject Access Modification) (Education) Order 2000 is.Previous MatchNext Match
        
        247.The Data Protection (Subject Access Modification) (Social Work) Order 2000.Previous MatchNext Match
        
        248.The Data Protection (Crown Appointments) Order 2000 is revoked.Previous MatchNext Match
        
        249.The Data Protection (Processing of Sensitive Personal Data) Order 2000.Previous MatchNext Match
        
        250.The Data Protection (Miscellaneous Subject Access Exemptions) Order 2000 is.Previous MatchNext Match
        
        251.The Data Protection (Designated Codes of Practice) (No. 2) Order.Previous MatchNext Match
        
        252.The Representation of the People (England and Wales) Regulations 2001.Previous MatchNext Match
        
        253.In regulation 3(1) (interpretation), at the appropriate places insert— “Article.Previous MatchNext Match
        
        254.In regulation 26(3)(a) (applications for registration), for “the Data Protection.Previous MatchNext Match
        
        255.In regulation 26A(2)(a) (application for alteration of register in respect.Previous MatchNext Match
        
        256.In regulation 32ZA(3)(f) (annual canvass), for “the Data Protection Act.Previous MatchNext Match
        
        257.In regulation 61A (conditions on the use, supply and inspection.Previous MatchNext Match
        
        258.(1) Regulation 92(2) (interpretation and application of Part VI etc).Previous MatchNext Match
        
        259.In regulation 96(2A)(b)(i) (restriction on use of the full register).Previous MatchNext Match
        
        260.In regulation 97(5) and (6) (supply of free copy of.Previous MatchNext Match
        
        261.In regulation 97A(7) and (8) (supply of free copy of.Previous MatchNext Match
        
        262.In regulation 99(6) and (7) (supply of free copy of.Previous MatchNext Match
        
        263.In regulation 109A(9) and (10) (supply of free copy of.Previous MatchNext Match
        
        264.In regulation 119(2) (conditions on the use, supply and disclosure.Previous MatchNext Match
        
        265.The Representation of the People (Scotland) Regulations 2001 are amended.Previous MatchNext Match
        
        266.In regulation 3(1) (interpretation), at the appropriate places, insert— “Article.Previous MatchNext Match
        
        267.In regulation 26(3)(a) (applications for registration), for “the Data Protection.Previous MatchNext Match
        
        268.In regulation 26A(2)(a) (application for alteration of register in respect.Previous MatchNext Match
        
        269.In regulation 32ZA(3)(f) (annual canvass), for “the Data Protection Act.Previous MatchNext Match
        
        270.In regulation 61(3) (records and lists kept under Schedule 4).Previous MatchNext Match
        
        271.In regulation 61A (conditions on the use, supply and inspection.Previous MatchNext Match
        
        272.(1) Regulation 92(2) (interpretation of Part VI etc) is amended.Previous MatchNext Match
        
        273.In regulation 95(3)(b)(i) (restriction on use of the full register).Previous MatchNext Match
        
        274.In regulation 96(5) and (6) (supply of free copy of.Previous MatchNext Match
        
        275.In regulation 98(6) and (7) (supply of free copy of.Previous MatchNext Match
        
        276.In regulation 108A(9) and (10) (supply of full register to.Previous MatchNext Match
        
        277.In regulation 119(2) (conditions on the use, supply and disclosure.Previous MatchNext Match
        
        278.(1) Article 9 of the Financial Services and Markets 2000.Previous MatchNext Match
        
        279.The Nursing and Midwifery Order 2001 is amended as follows.Previous MatchNext Match
        
        280.(1) Article 3 (the Nursing and Midwifery Council and its.Previous MatchNext Match
        
        281.(1) Article 25 (the Council's power to require disclosure of.Previous MatchNext Match
        
        282.In article 39B (European professional card), after paragraph (2) insert—.Previous MatchNext Match
        
        283.In article 40(6) (Directive 2005/36/EC: designation of competent authority etc).Previous MatchNext Match
        
        284.(1) Schedule 2B (Directive 2005/36/EC: European professional card) is amended.Previous MatchNext Match
        
        285.(1) The table in Schedule 3 (functions of the Council.Previous MatchNext Match
        
        286.In Schedule 4 (interpretation), omit the definition of “Directive 95/46/EC”.Previous MatchNext Match
        
        287.Regulation 3 of the Electronic Commerce (EC Directive) Regulations 2002.Previous MatchNext Match
        
        288.In paragraph (1)(b) for “the Data Protection Directive and the.Previous MatchNext Match
        
        289.In paragraph (3)— (a) omit the definitions of “Data Protection.Previous MatchNext Match
        
        290.The Data Protection (Processing of Sensitive Personal Data) (Elected Representatives).Previous MatchNext Match
        
        291.The Privacy and Electronic Communications (EC Directive) Regulations 2003 are.Previous MatchNext Match
        
        292.In regulation 2(1) (interpretation), in the definition of “the Information.Previous MatchNext Match
        
        293.(1) Regulation 4 (relationship between these Regulations and the Data.Previous MatchNext Match
        
        294.The Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order.Previous MatchNext Match
        
        295.In article 8(2) (exercise of powers by French officers in.Previous MatchNext Match
        
        296.In article 11(4) (exercise of powers by UK immigration officers.Previous MatchNext Match
        
        297.The Pupils' Educational Records (Scotland) Regulations 2003 are amended as.Previous MatchNext Match
        
        298.(1) Regulation 2 (interpretation) is amended as follows.Previous MatchNext Match
        
        299.(1) Regulation 6 (circumstances where information should not be disclosed).Previous MatchNext Match
        
        300.In regulation 9 (fees), for paragraph (1) substitute—Previous MatchNext Match
        
        301.Schedule 1 to the European Parliamentary Elections (Northern Ireland) Regulations.Previous MatchNext Match
        
        302.(1) Paragraph 74(1) (interpretation) is amended as follows.Previous MatchNext Match
        
        303.In paragraph 77(2)(b) (conditions on the use, supply and disclosure.Previous MatchNext Match
        
        304.In regulation 3(1) of the Freedom of Information and Data.Previous MatchNext Match
        
        305.The Environmental Information Regulations 2004 are amended as follows.Previous MatchNext Match
        
        306.(1) Regulation 2 (interpretation) is amended as follows.Previous MatchNext Match
        
        307.(1) Regulation 13 (personal data) is amended as follows.Previous MatchNext Match
        
        308.In regulation 14 (refusal to disclose information), in paragraph (3)(b).Previous MatchNext Match
        
        309.In regulation 18 (enforcement and appeal provisions), in paragraph (5).Previous MatchNext Match
        
        310.The Environmental Information (Scotland) Regulations 2004 are amended as follows.Previous MatchNext Match
        
        311.(1) Regulation 2 (interpretation) is amended as follows.Previous MatchNext Match
        
        312.(1) Regulation 11 (personal data) is amended as follows.Previous MatchNext Match
        
        313.(1) Regulation 7 of the Licensing Act 2003 (Personal Licences).Previous MatchNext Match
        
        314.The Education (Pupil Information) (England) Regulations 2005 are amended as.Previous MatchNext Match
        
        315.In regulation 3(5) (meaning of educational record) for “section 1(1).Previous MatchNext Match
        
        316.(1) Regulation 5 (disclosure of curricular and educational records) is.Previous MatchNext Match
        
        317.(1) Regulation 45 of the Civil Contingencies Act 2004 (Contingency.Previous MatchNext Match
        
        318.In regulation 3 of the Register of Judgments, Orders and.Previous MatchNext Match
        
        319.The Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005.Previous MatchNext Match
        
        320.(1) Regulation 39 (sensitive information) is amended as follows.Previous MatchNext Match
        
        321.The Data Protection (Processing of Sensitive Personal Data) Order 2006.Previous MatchNext Match
        
        322.(1) Paragraph 14 of Schedule 1 to the National Assembly.Previous MatchNext Match
        
        323.In regulation 3 of the Mental Capacity Act 2005 (Loss.Previous MatchNext Match
        
        324.For article 5 of the National Assembly for Wales Commission.Previous MatchNext Match
        
        325.In regulation 3 of the Mental Capacity Act 2005 (Loss.Previous MatchNext Match
        
        326.(1) Regulation 18 of the Representation of the People (Absent.Previous MatchNext Match
        
        327.In regulation 5 of the Representation of the People (Post-Local.Previous MatchNext Match
        
        328.The Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland).Previous MatchNext Match
        
        329.In regulation 2 (interpretation), at the appropriate place insert— “the.Previous MatchNext Match
        
        330.In regulation 10(2) (duties of Boards of Governors), for “documents.Previous MatchNext Match
        
        331.In regulation 118 of the Representation of the People (Northern.Previous MatchNext Match
        
        332.In paragraph 1(c) of the Schedule to the Companies Act.Previous MatchNext Match
        
        333.The Controlled Drugs (Supervision of Management and Use) (Wales) Regulations.Previous MatchNext Match
        
        334.In regulation 2(1) (interpretation)— (a) at the appropriate place in.Previous MatchNext Match
        
        335.(1) Regulation 25 (duty to co-operate by disclosing information as.Previous MatchNext Match
        
        336.(1) Regulation 26 (responsible bodies requesting additional information be disclosed.Previous MatchNext Match
        
        337.(1) Regulation 29 (occurrence reports) is amended as follows.Previous MatchNext Match
        
        338.(1) Regulation 5 of the Energy Order 2003 (Supply of.Previous MatchNext Match
        
        339.(1) Paragraph 6 of Schedule 2 to the Companies (Disclosure.Previous MatchNext Match
        
        340.(1) Paragraph 6 of Schedule 2 to the Overseas Companies.Previous MatchNext Match
        
        341.The Data Protection (Processing of Sensitive Personal Data) Order 2009.Previous MatchNext Match
        
        342.In regulation 25 of the Provision of Services Regulations 2009.Previous MatchNext Match
        
        343.(1) Regulation 9 of the INSPIRE Regulations 2009 (public access.Previous MatchNext Match
        
        344.(1) Regulation 10 of the INSPIRE (Scotland) Regulations 2009 (public.Previous MatchNext Match
        
        345.The Controlled Drugs (Supervision of Management and Use) Regulations (Northern.Previous MatchNext Match
        
        346.In regulation 2(2) (interpretation), at the appropriate place insert— “the.Previous MatchNext Match
        
        347.(1) Regulation 25 (duty to co-operate by disclosing information as.Previous MatchNext Match
        
        348.(1) Regulation 26 (responsible bodies requesting additional information be disclosed.Previous MatchNext Match
        
        349.(1) Regulation 29 (occurrence reports) is amended as follows.Previous MatchNext Match
        
        350.The Data Protection (Monetary Penalties) (Maximum Penalty and Notices) Regulations.Previous MatchNext Match
        
        351.The Pharmacy Order 2010 is amended as follows.Previous MatchNext Match
        
        352.In article 3(1) (interpretation), omit the definition of “Directive 95/46/EC”.Previous MatchNext Match
        
        353.(1) Article 9 (inspection and enforcement) is amended as follows.Previous MatchNext Match
        
        354.In article 33A (European professional card), after paragraph (2) insert—.Previous MatchNext Match
        
        355.(1) Article 49 (disclosure of information: general) is amended as.Previous MatchNext Match
        
        356.(1) Article 55 (professional performance assessments) is amended as follows.Previous MatchNext Match
        
        357.In article 67(6) (Directive 2005/36/EC: designation of competent authority etc.).Previous MatchNext Match
        
        358.(1) Schedule 2A (Directive 2005/36/EC: European professional card) is amended.Previous MatchNext Match
        
        359.(1) The table in Schedule 3 (Directive 2005/36/EC: designation of.Previous MatchNext Match
        
        360.The Data Protection (Monetary Penalties) Order 2010 is revoked.Previous MatchNext Match
        
        361.The National Employment Savings Trust Order 2010 is amended as.Previous MatchNext Match
        
        362.In article 2 (interpretation)— (a) omit the definition of “data”.Previous MatchNext Match
        
        363.(1) Article 10 (disclosure of requested data to the Secretary.Previous MatchNext Match
        
        364.(1) Schedule 3 to the Local Elections (Northern Ireland) Order.Previous MatchNext Match
        
        365.(1) Regulation 5 of the Pupil Information (Wales) Regulations 2011.Previous MatchNext Match
        
        366.In Schedule 4 to the Debt Arrangement Scheme (Scotland) Regulations.Previous MatchNext Match
        
        367.The Police and Crime Commissioner Elections Order 2012 is amended.Previous MatchNext Match
        
        368.(1) Schedule 2 (absent voting in Police and Crime Commissioner.Previous MatchNext Match
        
        369.(1) Schedule 10 (access to marked registers and other documents.Previous MatchNext Match
        
        370.The Data Protection (Processing of Sensitive Personal Data) Order 2012.Previous MatchNext Match
        
        371.Schedule 6 to the Neighbourhood Planning (Referendums) Regulations 2012 (registering.Previous MatchNext Match
        
        372.(1) Paragraph 29(1) (interpretation of Part 8) is amended as.Previous MatchNext Match
        
        373.In paragraph 32(3)(b)(i), for “section 11(3) of the Data Protection.Previous MatchNext Match
        
        374.In paragraph 33(6) and (7) (supply of copy of business.Previous MatchNext Match
        
        375.In paragraph 34(6) and (7) (supply of copy of business.Previous MatchNext Match
        
        376.In paragraph 39(8) and (97) (supply of copy of business.Previous MatchNext Match
        
        377.In paragraph 45(2) (conditions on the use, supply and disclosure.Previous MatchNext Match
        
        378.(1) Regulation 20 of the Controlled Drugs (Supervision of Management.Previous MatchNext Match
        
        379.(1) Article 3 of the Communications Act 2003 (Disclosure of.Previous MatchNext Match
        
        380.In the Criminal Justice and Data Protection (Protocol No. 36).Previous MatchNext Match
        
        381.The Data Protection (Assessment Notices) (Designation of National Health Service.Previous MatchNext Match
        
        382.In regulation 6 of the Control of Explosives Precursors etc.Previous MatchNext Match
        
        383.In regulation 3 of the Control of Poisons and Explosives.Previous MatchNext Match
        
        384.(1) Paragraph 6 of Schedule 2 to the Companies (Disclosure.Previous MatchNext Match
        
        385.The Small and Medium Sized Business (Credit Information) Regulations 2015.Previous MatchNext Match
        
        386.(1) Regulation 12 (criteria for the designation of a credit.Previous MatchNext Match
        
        387.(1) Regulation 15 (access to and correction of information for.Previous MatchNext Match
        
        388.The European Union (Recognition of Professional Qualifications) Regulations 2015 are.Previous MatchNext Match
        
        389.(1) Regulation 2(1) (interpretation) is amended as follows.Previous MatchNext Match
        
        390.In regulation 5(5) (functions of competent authorities in the United.Previous MatchNext Match
        
        391.In regulation 45(3) (processing and access to data regarding the.Previous MatchNext Match
        
        392.In regulation 46(1) (processing and access to data regarding the.Previous MatchNext Match
        
        393.In regulation 48(2) (processing and access to data regarding the.Previous MatchNext Match
        
        394.In regulation 66(3) (exchange of information), for “Directives 95/46/EC” substitute.Previous MatchNext Match
        
        395.The Scottish Parliament (Elections etc) Order 2015 is amended as.Previous MatchNext Match
        
        396.(1) Schedule 3 (absent voting) is amended as follows.Previous MatchNext Match
        
        397.(1) Schedule 8 (access to marked registers and other documents.Previous MatchNext Match
        
        398.In paragraph 1(3) of Schedule 3 to the Recall of.Previous MatchNext Match
        
        399.Schedule 4 to the Register of People with Significant Control.Previous MatchNext Match
        
        400.(1) Paragraph 6 (disclosure to a credit reference agency) is.Previous MatchNext Match
        
        401.In paragraph 12A (disclosure to a credit institution or a.Previous MatchNext Match
        
        402.In Part 3 (interpretation), after paragraph 13 insert— In this Schedule, “data protection obligations”, in relation to a.Previous MatchNext Match
        
        403.The Electronic Identification and Trust Services for Electronic Transactions Regulations.Previous MatchNext Match
        
        404.In regulation 2(1) (interpretation), omit the definition of “the 1998.Previous MatchNext Match
        
        405.In regulation 3(3) (supervision), omit “under the 1998 Act”.Previous MatchNext Match
        
        406.For Schedule 2 substitute— SCHEDULE 2 Information Commissioner's enforcement powers.Previous MatchNext Match
        
        407.The Court Files Privileged Access Rules (Northern Ireland) 2016 are.Previous MatchNext Match
        
        408.In rule 5 (information that may released) for “Schedule 1.Previous MatchNext Match
        
        409.In rule 7(2) (provision of information) for “Schedule 1 of.Previous MatchNext Match
        
        410.The Money Laundering, Terrorist Financing and Transfer of Funds (Information.Previous MatchNext Match
        
        411.In regulation 3(1) (interpretation), at the appropriate places insert— “the.Previous MatchNext Match
        
        412.In regulation 16(8) (risk assessment by the Treasury and Home.Previous MatchNext Match
        
        413.In regulation 17(9) (risk assessment by supervisory authorities), for “the.Previous MatchNext Match
        
        414.For regulation 40(9)(c) (record keeping) substitute— (c) “data subject” has.Previous MatchNext Match
        
        415.(1) Regulation 41 (data protection) is amended as follows.Previous MatchNext Match
        
        416.(1) Regulation 84 (publication: the Financial Conduct Authority) is amended.Previous MatchNext Match
        
        417.(1) Regulation 85 (publication: the Commissioners) is amended as follows.Previous MatchNext Match
        
        418.For regulation 106(a) (general restrictions) substitute— (a) a disclosure in.Previous MatchNext Match
        
        419.After paragraph 27 of Schedule 3 (relevant offences) insert— An offence under the Data Protection Act 2018, apart from.Previous MatchNext Match
        
        420.(1) Paragraph 6 of Schedule 5 to the Scottish Partnerships.Previous MatchNext Match
        
        421.In regulation 1(2) of the Data Protection (Charges and Information).Previous MatchNext Match
        
        422.The National Health Service (General Medical Services Contracts) (Scotland) Regulations.Previous MatchNext Match
        
        423.(1) Regulation 1 (citation and commencement) is amended as follows.Previous MatchNext Match
        
        424.In regulation 3(1) (interpretation)— (a) omit the definition of “the.Previous MatchNext Match
        
        425.(1) Schedule 6 (other contractual terms) is amended as follows.Previous MatchNext Match
        
        426.The National Health Service (Primary Medical Services Section 17C Agreements).Previous MatchNext Match
        
        427.(1) Regulation 1 (citation and commencement) is amended as follows.Previous MatchNext Match
        
        428.In regulation 3(1) (interpretation)— (a) omit the definition of “the.Previous MatchNext Match
        
        429.(1) Schedule 1 (content of agreements) is amended as follows.Previous MatchNext Match
        
        IntroductionPrevious MatchNext Match
        
        430.(1) Unless the context otherwise requires, legislation described in sub-paragraph.Previous MatchNext Match
        
        431.(1) References to a particular provision of, or made under.Previous MatchNext Match
        
        432.(1) References to personal data, and to the processing of.Previous MatchNext Match
        
        DefinitionsPrevious MatchNext Match
        
        433.Section 3(14) does not apply to this Schedule.Previous MatchNext Match
        
        434.Provision inserted into subordinate legislation by this Schedule may be.Previous MatchNext Match
        
        PART 1 GeneralPrevious MatchNext Match
        
        InterpretationPrevious MatchNext Match
        
        1.(1) In this Schedule— “the 1984 Act” means the Data.Previous MatchNext Match
        
        Right of access to personal data under the 1998 ActPrevious MatchNext Match
        
        2.(1) The repeal of sections 7 to 9A of the.Previous MatchNext Match
        
        3.(1) The repeal of section 10 of the 1998 Act.Previous MatchNext Match
        
        4.(1) The repeal of section 11 of the 1998 Act.Previous MatchNext Match
        
        5.(1) The repeal of section 12 of the 1998 Act.Previous MatchNext Match
        
        6.(1) The repeal of section 13 of the 1998 Act.Previous MatchNext Match
        
        7.(1) The repeal of section 14(1) to (3) and (6).Previous MatchNext Match
        
        8.The repeal of section 15 of the 1998 Act (jurisdiction.Previous MatchNext Match
        
        9.(1) The repeal of Part 4 of the 1998 Act.Previous MatchNext Match
        
        10.(1) In Schedule 18 to this Act, references to a.Previous MatchNext Match
        
        11.In section 185 of this Act, references to a record.Previous MatchNext Match
        
        Exemptions from the UK GDPR: restrictions of rules in Articles 13 to 15 of the UK GDPRPrevious MatchNext Match
        
        12.In paragraph 20(2) of Schedule 2 to this Act (self-incrimination).Previous MatchNext Match
        
        13.Until the first regulations under section 24(8) of this Act.Previous MatchNext Match
        
        LoggingPrevious MatchNext Match
        
        14.(1) In relation to an automated processing system set up.Previous MatchNext Match
        
        15.Nothing in this Schedule, read with the revocation of regulation.Previous MatchNext Match
        
        16.Until the first regulations under section 94(4)(b) of this Act.Previous MatchNext Match
        
        National security certificates: processing of personal data under the 1998 ActPrevious MatchNext Match
        
        17.(1) The repeal of section 28(2) to (12) of the.Previous MatchNext Match
        
        18.(1) This paragraph applies to a certificate issued under section.Previous MatchNext Match
        
        Appointment etcPrevious MatchNext Match
        
        19.(1) On and after the relevant day, the individual who.Previous MatchNext Match
        
        20.(1) The repeal of paragraph 10 of Schedule 5 to.Previous MatchNext Match
        
        21.(1) The repeal of section 52(1) of the 1998 Act.Previous MatchNext Match
        
        22.(1) The repeal of Schedule 5 to the 1998 Act.Previous MatchNext Match
        
        23.Paragraph 10 of Schedule 12 to this Act applies only.Previous MatchNext Match
        
        24.(1) The repeal of section 54(2) of the 1998 Act.Previous MatchNext Match
        
        25.(1) The repeal of section 54(3) of the 1998 Act.Previous MatchNext Match
        
        26.(1) The Data Protection (Charges and Information) Regulations 2018 (S.I.Previous MatchNext Match
        
        27.(1) The repeal of section 42 of the 1998 Act.Previous MatchNext Match
        
        28.(1) The repeal of section 52E of the 1998 Act.Previous MatchNext Match
        
        Interpretation of this PartPrevious MatchNext Match
        
        29.(1) In this Part of this Schedule, references to contravention.Previous MatchNext Match
        
        30.(1) The repeal of section 43 of the 1998 Act.Previous MatchNext Match
        
        31.(1) The repeal of section 44 of the 1998 Act.Previous MatchNext Match
        
        32.(1) The repeal of sections 41A and 41B of the.Previous MatchNext Match
        
        33.(1) The repeal of sections 40 and 41 of the.Previous MatchNext Match
        
        34.(1) The repeal of section 45 of the 1998 Act.Previous MatchNext Match
        
        35.(1) The repeal of section 46 of the 1998 Act.Previous MatchNext Match
        
        36.(1) The repeal of sections 47, 60 and 61 of.Previous MatchNext Match
        
        37.(1) The repeal of sections 50, 60 and 61 of.Previous MatchNext Match
        
        38.(1) The repeal of sections 55A, 55B, 55D and 55E.Previous MatchNext Match
        
        39.(1) The repeal of sections 48 and 49 of the.Previous MatchNext Match
        
        40.(1) The repeal of section 28 of the 1998 Act.Previous MatchNext Match
        
        41.(1) The repeal of paragraph 7 of Schedule 6 to.Previous MatchNext Match
        
        42.(1) The repeal of paragraph 8 of Schedule 6 to.Previous MatchNext Match
        
        43.(1) The references in the preceding paragraphs of this Part.Previous MatchNext Match
        
        Information noticesPrevious MatchNext Match
        
        44.In section 143 of this Act— (a) the reference to.Previous MatchNext Match
        
        45.In paragraph 16 of Schedule 15 to this Act (powers.Previous MatchNext Match
        
        46.(1) Tribunal Procedure Rules made under paragraph 7(1)(a) of Schedule.Previous MatchNext Match
        
        Powers to disclose information to the CommissionerPrevious MatchNext Match
        
        47.(1) The following provisions (as amended by Schedule 19 to.Previous MatchNext Match
        
        48.(1) This paragraph applies in relation to the code of.Previous MatchNext Match
        
        49.(1) This paragraph applies in relation to the original statement.Previous MatchNext Match
        
        50.In section 159(1)(a) of the Consumer Credit Act 1974 (correction.Previous MatchNext Match
        
        51.Paragraphs 52 to 55 make provision about the Freedom of.Previous MatchNext Match
        
        52.(1) This paragraph applies where a request for information was.Previous MatchNext Match
        
        53.(1) Tribunal Procedure Rules made under paragraph 7(1)(b) of Schedule.Previous MatchNext Match
        
        54.(1) The repeal of paragraph 8 of Schedule 6 to.Previous MatchNext Match
        
        55.(1) The amendment of section 77 of the 2000 Act.Previous MatchNext Match
        
        56.(1) This paragraph applies where a request for information was.Previous MatchNext Match
        
        57.Until the first regulations under Article 5(4)(a) of the Access.Previous MatchNext Match
        
        58.(1) The repeal of a provision of the 1998 Act.Previous MatchNext Match
        
        59.Part 3 of Schedule 19 to this Act (modifications) does.Previous MatchNext Match
        
        60.(1) This paragraph applies where a request for information was.Previous MatchNext Match
        
        61.(1) This paragraph applies where a request for information was.Previous MatchNext Match
        
        Part 1 InterpretationPrevious MatchNext Match
        
        1.The applied GPDRPrevious MatchNext Match
        
        2.Merger of the directly applicable GDPR and the applied GDPRPrevious MatchNext Match
        
        3.(1) Anything done in connection with the EU GDPR as.Previous MatchNext Match
        
        4.UK GDPR: adequacy decisions and adequacy regulationsPrevious MatchNext Match
        
        5.(1) The following are specified for the purposes of paragraph.Previous MatchNext Match
        
        6.(1) In the provisions listed in sub-paragraph (2)—Previous MatchNext Match
        
        7.UK GDPR: transfers subject to appropriate safeguards provided by standard data protection clausesPrevious MatchNext Match
        
        8.(1) Paragraph 7 does not apply to the extent that.Previous MatchNext Match
        
        9.UK GDPR: transfers subject to appropriate safeguards provided by binding corporate rulesPrevious MatchNext Match
        
        10.Part 3 (law enforcement processing): adequacy decisions and adequacy regulationsPrevious MatchNext Match
        
        11.(1) The following are specified for the purposes of paragraph.Previous MatchNext Match
        
        12.In section 74B(1), (3), (6) and (7)—Previous MatchNext Match
        
        13.Applied GDPR: power to make provision in consequence of GDPR regulationsPrevious MatchNext Match
        
        14.Applied GDPR: national security certificatesPrevious MatchNext Match
        
        15.Confidentiality of informationPrevious MatchNext Match
        
        16.GDPR: maximum amount of penaltiesPrevious MatchNext Match
        
        17.GDPR: right to an effective remedy against the CommissionerPrevious MatchNext Match