SCHEDULE 1Amendments of the UK GDPR

Chapter 8 (remedies, liability and penalties)59

1

Article 80 is amended as follows.

2

In paragraph 1—

a

for the words from “a not-for profit” to “their personal data” substitute “a body or other organisation which meets the conditions in section 187(3) and (4) of the 2018 Act”;

b

omit “where provided for by Member State law”.

3

In paragraph 2—

a

for “Member States” substitute “The Secretary of State”;

b

omit “, in that Member State,”;

c

for “the supervisory authority which is competent pursuant to Article 77” substitute “the Commissioner”.

4

After that paragraph insert—

3

The Secretary of State may exercise the power under paragraph 2 of this Article only by making regulations under section 190 of the 2018 Act.