420(1)Paragraph 6 of Schedule 5 to the Scottish Partnerships (Register of People with Significant Control) Regulations 2017 (conditions for permitted disclosure to a credit institution or a financial institution) is amended as follows.
(2)The existing text becomes sub-paragraph (1).
(3)For paragraph (b) of that sub-paragraph substitute—
“(b)for the purposes of ensuring that it complies with its data protection obligations.”
(4)After sub-paragraph (1) insert—
“(2)In this paragraph, “data protection obligations”, in relation to a relevant institution, means—
(a)where the institution carries on business in the United Kingdom, obligations under the data protection legislation (as defined in section 3 of the Data Protection Act 2018);
(b)where the institution carries on business in a EEA State other than the United Kingdom, obligations under—
(i)the GDPR (as defined in section 3(10) of the Data Protection Act 2018),
(ii)legislation made in exercise of powers conferred on member States under the GDPR (as so defined), and
(iii)legislation implementing the Law Enforcement Directive (as defined in section 3(12) of the Data Protection Act 2018).”