The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019

Chapter 4 (controller and processor)

37.—(1) Article 43 is amended as follows.

(2) In paragraph 1—

(a) in the opening words—

(i) for “the competent supervisory authority” substitute “the Commissioner”;

(ii) for “the supervisory authority” substitute “the Commissioner”;

(iii) for “Members States shall ensure that those certification bodies are” substitute “In accordance with section 17 of the 2018 Act, those certification bodies may only be”;

(b) for point (a) substitute—

“(a) the Commissioner;”;

(c) in point (b)—

(i) for “the national accreditation body” substitute “the UK national accreditation body”;

(ii) for “the supervisory authority which is competent pursuant to Article 55 or 56” substitute “the Commissioner”.

(3) In paragraph 2—

(a) in point (a), for “the competent supervisory authority” substitute “the Commissioner”;

(b) in point (b), for “the supervisory authority” to the end substitute “the Commissioner”;

(c) in point (e), for “the competent supervisory authority” substitute “the Commissioner”.

(4) In paragraph 3, for “the supervisory authority which is competent pursuant to Article 55 or 56 or by the Board pursuant to Article 63” substitute “the Commissioner”.

(5) In paragraph 5, for “the competent supervisory authorities” substitute “the Commissioner”.

(6) In paragraph 6—

(a) for “the supervisory authority” substitute “the Commissioner”;

(b) omit from “The supervisory authorities” to the end.

(7) In paragraph 7, for “the competent supervisory authority or the national accreditation body” substitute “the Commissioner or the UK national accreditation body”.

(8) Omit paragraphs 8 and 9.