Data Protection Act 2018

Small and Medium Sized Business (Credit Information) Regulations 2015 (S.I. 2015/1945)U.K.

385U.K.The Small and Medium Sized Business (Credit Information) Regulations 2015 are amended as follows.

386(1)Regulation 12 (criteria for the designation of a credit reference agency) is amended as follows.U.K.

(2)In paragraph (1)(b), for “the Data Protection Act 1998” substitute “ the data protection legislation ”.

(3)After paragraph (2) insert—

(3)In this regulation, “the data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act).

387(1)Regulation 15 (access to and correction of information for individuals and small firms) is amended as follows.U.K.

(2)For paragraph (1) substitute—

(1)Section 13 of the Data Protection Act 2018 (rights of the data subject under the GDPR: obligations of credit reference agencies) applies in respect of a designated credit reference agency which is not a credit reference agency within the meaning of section 145(8) of the Consumer Credit Act 1974 as if it were such an agency.

(3)After paragraph (3) insert—

(4)In this regulation, the reference to section 13 of the Data Protection Act 2018 has the same meaning as in Parts 5 to 7 of that Act (see section 3(14) of that Act).