The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 No. 419

SCHEDULE 3 U.K. Consequential amendments of other legislation

PART 3 U.K. Amendments of other legislation

Channel Tunnel (International Arrangements) Order 1993 U.K.

27.—(1) Article 4 of the Channel Tunnel (International Arrangements) Order 1993 (application of enactments) M1 is amended as follows.

(2) In paragraph (2)—

(a) after “For the purposes of” insert “ Article 3 of the UK GDPR and ”;

(b) in the words following paragraph (c), after “establishment (and” insert “ the UK GDPR and ”.

(3) In paragraph (3)—

(a) after “For the purposes of” insert “ Article 3 of the UK GDPR and ”;

(b) in the words following paragraph (b), after “establishment (and” insert “ the UK GDPR and ”.

(4) After paragraph (3) insert—

“(4) In this article, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

Commencement Information

I1 Sch. 3 para. 27 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M1 S.I. 1993/1813.

Channel Tunnel (Miscellaneous Provisions) Order 1994 U.K.

28.—(1) Article 4 of the Channel Tunnel (Miscellaneous Provisions) Order 1994 (application of enactments) M2 is amended as follows.

(2) In paragraph (2)—

(a) after “For the purposes of” insert “ Article 3 of the UK GDPR and ”;

(b) for “the 2018 Act applies” substitute “ the UK GDPR and the 2018 Act apply ”.

(3) In paragraph (3)—

(a) after “For the purposes of” insert “ Article 3 of the UK GDPR and ”;

(b) for “the 2018 Act does” substitute “ the UK GDPR and the 2018 Act do ”.

(4) After paragraph (3) insert—

“(4) In this article, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

Commencement Information

I2 Sch. 3 para. 28 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M2 S.I. 1994/1405.

Scottish Parliamentary Corporate Body (Crown Status) Order 1999 U.K.

29.  In article 7 of the Scottish Parliamentary Corporate Body (Crown Status) Order 1999 (Data Protection Act 2018) M3 —

(a) in paragraph (2)(a), (d) and (e), for “GDPR” substitute “ UK GDPR ”;

(b) omit paragraph (5).

Commencement Information

I3 Sch. 3 para. 29 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M3 S.I. 1999/677.

Northern Ireland Assembly Commission (Crown Status) Order 1999 U.K.

30.  In article 9 of the Northern Ireland Assembly Commission (Crown Status) Order 1999 (Data Protection Act 2018) M4 —

(a) in paragraph (2)(a), (d) and (e), for “GDPR” substitute “ UK GDPR ”;

(b) omit paragraph (5).

Commencement Information

I4 Sch. 3 para. 30 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M4 S.I. 1999/3145.

Representation of the People (England and Wales) Regulations 2001 U.K.

31.  The Representation of the People (England and Wales) Regulations 2001 M5 are amended as follows.

Commencement Information

I5 Sch. 3 para. 31 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M5 S.I. 2001/341.

32.—(1) Regulation 3(1) (interpretation) is amended as follows. U.K.

(2) In the definition of “Article 89 GDPR purposes”, for “the GDPR” substitute “ the UK GDPR ”.

(3) Omit the definition of “the GDPR”.

(4) At the appropriate place insert—

““the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018;”.

Commencement Information

I6 Sch. 3 para. 32 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

33.  In regulation 92(2)(ba) (interpretation and application of Part VI etc), for “the GDPR” substitute “ the UK GDPR ”. U.K.

Commencement Information

I7 Sch. 3 para. 33 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Representation of the People (Scotland) Regulations 2001 U.K.

34.  The Representation of the People (Scotland) Regulations 2001 M6 are amended as follows.

Commencement Information

I8 Sch. 3 para. 34 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M6 S.I. 2001/497.

35.—(1) Regulation 3(1) (interpretation) is amended as follows. U.K.

(2) In the definition of “Article 89 GDPR purposes”, for “the GDPR” substitute “ the UK GDPR ”.

(3) Omit the definition of “the GDPR”.

(4) At the appropriate place insert—

““the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018;”.

Commencement Information

I9 Sch. 3 para. 35 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

36.  In regulation 92(2)(ba) (interpretation of Part VI etc), for “the GDPR” substitute “ the UK GDPR ”. U.K.

Commencement Information

I10 Sch. 3 para. 36 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Financial Services and Markets Act 2000 (Disclosure of Confidential Information) Regulations 2001 U.K.

37.—(1) Article 9 of the Financial Services and Markets 2000 (Disclosure of Confidential Information) Regulations 2001 (disclosure by regulators or regulator workers to certain other persons) M7 is amended as follows.

(2) In paragraph (2B)(a), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (6) substitute—

“(6) In this article, “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act).”.

Commencement Information

I11 Sch. 3 para. 37 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M7 S.I. 2001/2188.

Nursing and Midwifery Order 2001 U.K.

38.  The Nursing and Midwifery Order 2001 M8 is amended as follows.

Commencement Information

I12 Sch. 3 para. 38 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M8 S.I. 2002/253.

39.—(1) Article 3 (the Nursing and Midwifery Council and its Committees) is amended as follows. U.K.

(2) In paragraph (18), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (19).

Commencement Information

I13 Sch. 3 para. 39 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

40.—(1) Article 25 (the Council's power to require disclosure of information) is amended as follows. U.K.

(2) In paragraph (3), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (6), omit the definition of “the GDPR”.

Commencement Information

I14 Sch. 3 para. 40 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

41.  In article 40(6) (Directive 2005/36/EC: designation of competent authority etc), omit the definition of “the GDPR”. U.K.

Commencement Information

I15 Sch. 3 para. 41 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

42.  In Schedule 4 (interpretation), at the appropriate place insert— U.K.

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

Commencement Information

I16 Sch. 3 para. 42 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Electronic Commerce (EC Directive) Regulations 2002 U.K.

43.—(1) Regulation 3 of the Electronic Commerce (EC Directive) Regulations 2002 (exclusions) M9 is amended as follows.

(2) In paragraph (1)(b), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (3)—

(a) omit the definition of “the GDPR”;

(b) at the appropriate place insert—

““the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018;”.

Commencement Information

I17 Sch. 3 para. 43 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M9 S.I. 2002/2013.

Privacy and Electronic Communications (EC Directive) Regulations 2003 U.K.

44.  In regulation 2(1) of the Privacy and Electronic Communications (EC Directive) Regulations 2003 M10 , for “GDPR” substitute “ UK GDPR ”.

Commencement Information

I18 Sch. 3 para. 44 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M10 S.I. 2003/2426.

Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003 U.K.

45.  The Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003 M11 is amended as follows.

Commencement Information

I19 Sch. 3 para. 45 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M11 S.I. 2003/2818.

46.—(1) Article 8 (exercise of powers by French officers in a control zone in the United Kingdom: disapplication of law of England and Wales) is amended as follows. U.K.

(2) In paragraph (2), for “The Data Protection Act 2018” substitute “The UK GDPR and the Data Protection Act 2018.

(3) After paragraph (2) insert—

“(2A) In paragraph (2), “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

Commencement Information

I20 Sch. 3 para. 46 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

47.—(1) Article 11 (exercise of powers by UK immigration officers and constables in a control zone in France: enactments having effect) is amended as follows. U.K.

(2) In paragraph (4)—

(a) for “The Data Protection Act 2018” substitute “ The UK GDPR and the Data Protection Act 2018 (“the 2018 Act”) ”;

(b) for “section 207 of that Act” substitute “ Article 3 of the UK GDPR and section 207 of the 2018 Act ”.

(3) After paragraph (4) insert—

“(4A) In paragraph (4), “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

Commencement Information

I21 Sch. 3 para. 47 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Pupils' Educational Records (Scotland) Regulations 2003 U.K.

48.  The Pupils' Educational Records (Scotland) Regulations 2003 M12 are amended as follows.

Commencement Information

I22 Sch. 3 para. 48 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M12 S.S.I. 2003/581.

49.  In regulation 2 (interpretation)— U.K.

(a) omit the definition of “the GDPR”;

(b) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

Commencement Information

I23 Sch. 3 para. 49 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

50.  In regulation 6(aa) and (ab) (circumstances where information should not be disclosed), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I24 Sch. 3 para. 50 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

51.  In regulation 9(1A) (in both places) and (1B), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I25 Sch. 3 para. 51 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Environmental Information Regulations 2004 U.K.

52.  The Environmental Information Regulations 2004 M13 are amended as follows.

Commencement Information

I26 Sch. 3 para. 52 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M13 S.I. 2004/3391.

53.—(1) Regulation 2 (interpretation) is amended as follows. U.K.

(2) In paragraph (1)—

(a) in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the words from “ “the GDPR”” to “(14) of that Act);”;

(c) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

(3) In paragraph (4A)—

(a) after “references to” insert “ the UK GDPR and ”;

(b) after “as if in” insert “ Article 2 of the UK GDPR and ”;

(c) for “(other general processing)” substitute “ (exemptions for manual unstructured processing and for national security and defence purposes) ”.

Commencement Information

I27 Sch. 3 para. 53 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

54.  In regulation 13 (personal data), in paragraphs (2B)(a), (3A)(a), (5B)(b) and (c) and (6) (in both places), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I28 Sch. 3 para. 54 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Environmental Information (Scotland) Regulations 2004 U.K.

55.  The Environmental Information (Scotland) Regulations 2004 M14 are amended as follows.

Commencement Information

I29 Sch. 3 para. 55 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M14 S.S.I. 2004/520.

56.—(1) Regulation 2 (interpretation) is amended as follows. U.K.

(2) In paragraph (1)—

(a) in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the words from “ “the GDPR”” to “(14) of that Act);”;

(c) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

(3) In paragraph (3A)—

(a) after “references to” insert “ the UK GDPR and ”;

(b) after “as if in” insert “ Article 2 of the UK GDPR and ”;

(c) for “(other general processing)” substitute “ (exemptions for manual unstructured processing and for national security and defence purposes) ”.

Commencement Information

I30 Sch. 3 para. 56 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

57.  In regulation 11 (personal data), in paragraphs (3B), (4A)(a) and (7) (in both places), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I31 Sch. 3 para. 57 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Licensing Act 2003 (Personal Licences) Regulations 2005 U.K.

58.—(1) Regulation 7 of the Licensing Act 2003 (Personal Licences) Regulations 2005 (application for grant of a personal licence) M15 is amended as follows.

(2) In paragraph (1)(b)(iii), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (3) substitute—

“(3) In this regulation, “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act).”.

Commencement Information

I32 Sch. 3 para. 58 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M15 S.I. 2005/41.

Education (Pupil Information) (England) Regulations 2005 U.K.

59.—(1) Regulation 5 of the Education (Pupil Information) (England) Regulations 2005 (disclosure of curricular and educational records) M16 is amended as follows.

(2) In paragraph (4), for “GDPR” (in both places) substitute “ UK GDPR ”.

(3) For paragraph (7) substitute—

“(7) In this regulation, “the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act).”.

Commencement Information

I33 Sch. 3 para. 59 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M16 S.I. 2005/1437.

Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005 U.K.

60.—(1) Regulation 45 of the Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005 (sensitive information) M17 is amended as follows.

(2) In paragraphs (1B)(a) and (1C)(a), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (1D)—

(a) in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the words from “ “the GDPR”” to “(14) of that Act);”;

(c) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

(4) In paragraph (1E), for “GDPR” (in both places) substitute “ UK GDPR ”.

Commencement Information

I34 Sch. 3 para. 60 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M17 S.I. 2005/2042.

Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005 U.K.

61.—(1) Regulation 39 of the Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005 (sensitive information) M18 is amended as follows.

(2) In paragraphs (1B)(a) and (1C)(a), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (1D)—

(a) in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the words from “ “the GDPR”” to “(14) of that Act);”;

(c) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

(4) In paragraph (1E), for “GDPR” (in both places) substitute “ UK GDPR ”.

Commencement Information

I35 Sch. 3 para. 61 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M18 S.S.I. 2005/494.

Register of Judgments, Orders and Fines Regulations 2005 U.K.

62.  In regulation 3 of the Register of Judgments, Orders and Fines Regulations 2005 (interpretation) M19 —

(a) in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the definition of “the GDPR”;

(c) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

Commencement Information

I36 Sch. 3 para. 62 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M19 S.I. 2005/3595.

National Assembly for Wales (Representation of the People) Order 2007 U.K.

63.—(1) Paragraph 14 of Schedule 1 to the National Assembly for Wales (Representation of the People) Order 2007 (absent voting at Assembly elections: conditions on the use, supply and inspection of absent vote records or lists) M20 is amended as follows.

(2) In sub-paragraph (1)(a), for “GDPR” substitute “ UK GDPR ”.

(3) For sub-paragraph (2) substitute—

“(2) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

Commencement Information

I37 Sch. 3 para. 63 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M20 S.I. 2007/236.

National Assembly for Wales Commission (Crown Status) Order 2007 U.K.

64.  In article 5 of the National Assembly for Wales Commission (Crown Status) Order 2007 (Data Protection Act 2018) M21 —

(a) in paragraph (2)(a), (d) and (e), for “GDPR” substitute “ UK GDPR ”;

(b) omit paragraph (5).

Commencement Information

I38 Sch. 3 para. 64 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M21 S.I. 2007/1118.

Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007 U.K.

65.—(1) Regulation 18 of the Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007 (conditions on the supply and inspection of absent voter records or lists) M22 is amended as follows.

(2) In paragraph (1)(a), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (2) substitute—

“(2) In this regulation, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

Commencement Information

I39 Sch. 3 para. 65 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M22 S.S.I. 2007/170.

Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007 U.K.

66.—(1) Regulation 5 of the Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007 (conditions on the use, supply and disclosure of documents open to public inspection) M23 is amended as follows.

(2) In paragraph (2)(i), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (4) substitute—

“(4) In this regulation, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

Commencement Information

I40 Sch. 3 para. 66 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M23 S.S.I. 2007/264.

Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007 U.K.

67.  The Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007 M24 are amended as follows.

Commencement Information

I41 Sch. 3 para. 67 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M24 S.R. (N.I.) 2007 No. 43.

68.  In regulation 2 (interpretation)— U.K.

(a) omit the definition of “the GDPR”;

(b) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

Commencement Information

I42 Sch. 3 para. 68 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

69.  In regulation 10(2) (duties of Boards of Governors), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I43 Sch. 3 para. 69 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Representation of the People (Northern Ireland) Regulations 2008 U.K.

70.—(1) Regulation 118 of the Representation of the People (Northern Ireland) Regulations 2008 (conditions on the use, supply and disclosure of documents open to public inspection) M25 is amended as follows.

(2) In paragraph (2), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (4) substitute—

“(4) In this regulation, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

Commencement Information

I44 Sch. 3 para. 70 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M25 S.I. 2008/1741.

Controlled Drugs (Supervision of Management and Use) (Wales) Regulations 2008 U.K.

F1 71.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Textual Amendments

F1 Sch. 3 paras. 71-75 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

F1 72.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . U.K.

Textual Amendments

F1 Sch. 3 paras. 71-75 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

F1 73.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . U.K.

Textual Amendments

F1 Sch. 3 paras. 71-75 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

F1 74.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . U.K.

Textual Amendments

F1 Sch. 3 paras. 71-75 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

F1 75.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . U.K.

Textual Amendments

F1 Sch. 3 paras. 71-75 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008 U.K.

76.—(1) Regulation 5 of the Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008 (information whose disclosure would be affected by the application of other legislation) M26 is amended as follows.

(2) In paragraph (3B)(a), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (5)—

(a) in the definition of “data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the definition of “the GDPR”;

(c) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

Commencement Information

I45 Sch. 3 para. 76 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M26 S.R. (N.I.) 2008 No. 3.

INSPIRE Regulations 2009 U.K.

77.—(1) Regulation 9 of the INSPIRE Regulations 2009 (public access to spatial data sets and spatial data services) M27 is amended as follows.

(2) In paragraph (2)(b), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (8)—

(a) in the definition of “data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the definition of “the GDPR”;

(c) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

(4) In paragraph (9), for “GDPR” (in both places) substitute “ UK GDPR ”.

Commencement Information

I46 Sch. 3 para. 77 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M27 S.I. 2009/3157.

INSPIRE (Scotland) Regulations 2009 U.K.

78.—(1) Regulation 10 of the INSPIRE (Scotland) Regulations 2009 (public access to spatial data sets and spatial data services) M28 is amended as follows.

(2) In paragraph (2)(b), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (7)—

(a) in the definition of “data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the definition of “the GDPR”;

(c) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

(4) In paragraph (8), for “GDPR” (in both places) substitute “ UK GDPR ”.

Commencement Information

I47 Sch. 3 para. 78 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M28 S.S.I. 2009/440.

Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009 U.K.

79.  The Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009 M29 are amended as follows.

Commencement Information

I48 Sch. 3 para. 79 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M29 S.R. (N.I.) 2009 No. 225.

80.  In regulation 2(2) (interpretation)— U.K.

(a) omit the words from “ “the GDPR”” to “(14) of that Act);”;

(b) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

Commencement Information

I49 Sch. 3 para. 80 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

81.  In regulation 25(7) (duty to co-operate by disclosing information as regards relevant persons), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I50 Sch. 3 para. 81 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

82.  In regulation 26(6) (responsible bodies requesting additional information be disclosed about relevant persons), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I51 Sch. 3 para. 82 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

83.  In regulation 29(3) (occurrence reports), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I52 Sch. 3 para. 83 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Pharmacy Order 2010 U.K.

84.  The Pharmacy Order 2010 M30 is amended as follows.

Commencement Information

I53 Sch. 3 para. 84 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M30 S.I. 2010/231.

85.  In article 3(1) (interpretation), at the appropriate place insert— U.K.

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

Commencement Information

I54 Sch. 3 para. 85 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

86.  In article 9(5) (inspection and enforcement), for “and references to Schedule 2 to the Data Protection Act 2018 have” substitute “ has ”. U.K.

Commencement Information

I55 Sch. 3 para. 86 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

87.—(1) Article 49 (disclosure of information: general) is amended as follows. U.K.

(2) In paragraph (2)(a), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (6).

Commencement Information

I56 Sch. 3 para. 87 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

88.—(1) Article 55 (professional performance assessments) is amended as follows. U.K.

(2) In paragraph (5)(a), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (9).

Commencement Information

I57 Sch. 3 para. 88 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Local Elections (Northern Ireland) Order 2010 U.K.

89.  In paragraph 1(1) of Schedule 3 to the Local Elections (Northern Ireland) Order 2010 (access to marked registers and other documents open to public inspection after an election) M31 —

(a) in the definition of “Article 89 GDPR purposes”, for “the GDPR” substitute “ the UK GDPR ”;

(b) omit the definition of “the GDPR”;

(c) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

Commencement Information

I58 Sch. 3 para. 89 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M31 S.I. 2010/2977.

Prospective

Pupil Information (Wales) Regulations 2011 U.K.

F2 90.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Textual Amendments

F2 Sch. 3 para. 90 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

Prospective

F3 91.  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . U.K.

Textual Amendments

F3 Sch. 3 para. 91 omitted (31.12.2020 immediately before IP completion day) by virtue of The Retained EU Law (Miscellaneous Amendments) (Wales) (EU Exit) Regulations 2019 (S.I. 2019/1281), regs. 1(3), 9; 2020 c. 1, Sch. 5 para. 1(1)

Police and Crime Commissioner Elections Order 2012 U.K.

92.  The Police and Crime Commissioner Elections Order 2012 M32 is amended as follows.

Commencement Information

I59 Sch. 3 para. 92 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M32 S.I. 2012/1917.

93.—(1) Schedule 2 (absent voting in Police and Crime Commissioner elections) is amended as follows. U.K.

(2) In paragraph 20 (absent voter lists: supply of copies etc)—

(a) in sub-paragraph (8)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (11) substitute—

“(11) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

(3) In paragraph 24 (restriction on use of absent voter records or lists or the information contained in them)—

(a) in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (4) substitute—

“(4) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

Commencement Information

I60 Sch. 3 para. 93 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

94.—(1) Schedule 10 (access to marked registers and other documents open to public inspection after an election) is amended as follows. U.K.

(2) In paragraph 5 (restriction on use of absent voter records or lists or the information contained in them)—

(a) in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (5) substitute—

“(5) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”.

Commencement Information

I61 Sch. 3 para. 94 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Neighbourhood Planning (Referendums) Regulations 2012 U.K.

95.  In paragraph 29(1) of Schedule 6 to the Neighbourhood Planning (Referendums) Regulations 2012 (interpretation of Part 8) M33 —

(a) in the definition of “Article 89 GDPR purposes”, for “the GDPR” substitute “ the UK GDPR ”;

(b) omit the definition of “the GDPR”;

(c) in the definition of “relevant requirement”, for “the GDPR” substitute “ the UK GDPR ”;

(d) at the appropriate place insert—

““the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018;”.

Commencement Information

I62 Sch. 3 para. 95 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M33 S.I. 2012/2031.

Controlled Drugs (Supervision of Management and Use) Regulations 2013 U.K.

96.—(1) Regulation 20 of the Controlled Drugs (Supervision of Management and Use) Regulations 2013 (information management) M34 is amended as follows.

(2) In paragraph (5), for “GDPR” (in both places) substitute “ UK GDPR ”.

(3) For paragraph (7) substitute—

“(7) In this regulation, “personal data” and “the UK GDPR” have the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2), (10) and (14) of that Act).”.

Commencement Information

I63 Sch. 3 para. 96 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M34 S.I. 2013/373.

Small and Medium Sized Business (Credit Information) Regulations 2015 U.K.

97.—(1) Regulation 15 of the Small and Medium Sized Business (Credit Information) Regulations 2015 (access to and correction of information for individuals and small firms) M35 is amended as follows.

(2) In paragraph (1), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (4).

Commencement Information

I64 Sch. 3 para. 97 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M35 S.I. 2015/1945.

Scottish Parliament (Elections etc) Order 2015 U.K.

98.  The Scottish Parliament (Elections etc) Order 2015 M36 is amended as follows.

Commencement Information

I65 Sch. 3 para. 98 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M36 S.S.I. 2015/425.

99.—(1) Schedule 3 (absent voting) is amended as follows. U.K.

(2) In paragraph 16 (absent voting lists: supply of copies etc)—

(a) in sub-paragraph (4)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (11) substitute—

“(11) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”

(3) In paragraph 20 (restriction on use of absent voting lists)—

(a) in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (4) substitute—

“(4) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”

Commencement Information

I66 Sch. 3 para. 99 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

100.  In Schedule 8 (access to marked registers and other documents open to public inspection after an election), in paragraph 5 (restriction on use of documents)— U.K.

(a) in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (5) substitute—

“(5) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.”

Commencement Information

I67 Sch. 3 para. 100 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Electronic Identification and Trust Services for Electronic Transactions Regulations 2016 U.K.

101.  In Schedule 2 to the Electronic Identification and Trust Services for Electronic Transactions Regulations 2016 (Information Commissioner's enforcement powers) M37 , in paragraph 16(a) and (b) (modification of section 159 of the Data Protection Act 2018), for “GDPR” substitute “ UK GDPR ”.

Commencement Information

I68 Sch. 3 para. 101 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M37 S.I. 2016/696.

Court Files Privileged Access Rules (Northern Ireland) 2016 U.K.

102.  The Court Files Privileged Access Rules (Northern Ireland) 2016 M38 are amended as follows.

Commencement Information

I69 Sch. 3 para. 102 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M38 S.R. (N.I.) 2016 No. 123.

103.  In rule 2 (interpretation), at the appropriate place insert— U.K.

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

Commencement Information

I70 Sch. 3 para. 103 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

104.  In rule 5(a) (information that may be released), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I71 Sch. 3 para. 104 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

105.  In rule 7(2)(a) (provision of information), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I72 Sch. 3 para. 105 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 U.K.

106.  The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 M39 are amended as follows.

Commencement Information

I73 Sch. 3 para. 106 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Marginal Citations

M39 S.I. 2017/692.

107.  In regulation 3(1) (interpretation)— U.K.

(a) omit the words from “ “the GDPR” to “(14) of that Act);”;

(b) at the appropriate place insert—

““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);”.

Commencement Information

I74 Sch. 3 para. 107 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

108.  In regulation 16(8)(b) (risk assessment by the Treasury and Home Office), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I75 Sch. 3 para. 108 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

109.  In regulation 17(9)(b) (risk assessment by supervisory authorities), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I76 Sch. 3 para. 109 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

110.  In regulation 41 (data protection), in paragraphs (3)(a), (6), (7), (8) and (9), for “GDPR” substitute “ UK GDPR ”. U.K.

Commencement Information

I77 Sch. 3 para. 110 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)