Data Protection Act 2018 (c. 12)

SCHEDULES

SCHEDULE 6 The applied GDPR and the applied Chapter 2

PART 1 Modifications to the GDPR

Section 1 of Chapter IV of the GDPR (controller and processor: general obligations)

24 In Article 28 (processor)—

(a) in paragraph 3, in point (a), for “Union or Member State law to which the processor is subject” substitute “domestic law”;

(b) in paragraph 3, in the second subparagraph, for “other Union or Member State data protection provisions” substitute “any other rule of domestic law relating to data protection”;

(c) in paragraph 6, for “paragraphs 7 and 8” substitute “paragraph 8”;

(d) omit paragraph 7;

(e) in paragraph 8, omit “and in accordance with the consistency mechanism referred to in Article 63”.