PART 2Common Market Organisation Amendments

I174

In Article 224—

a

for paragraph 1 substitute—

1

Personal data collected for the purposes set out in Article 223(1) must not be processed in a way which is incompatible with those purposes.

b

in paragraph 3—

i

for “Directive 95/46/EC and Regulation (EC) No 45/2001”, substitute “ Regulation (EU) 2016/679 and the Data Protection Act 2018 M1 ”;

ii

for the words from “the minimum” to the end, substitute “ any statutory minimum retention periods ”;

c

in paragraph 4—

i

for “Member States” substitute “ The relevant authority ”;

ii

for “by national and Union bodies”, substitute “ by United Kingdom bodies and bodies in the constituent nation ”;

iii

for the words from “Directive” to the end, substitute “ Regulation (EU) 2016/679 and the Data Protection Act 2018 ”.