SCHEDULES

SCHEDULE 10Minor and consequential provision

Part 1General amendments

Privacy and Electronic Communications (EC Directive) Regulations 2003 (S.I. 2003/2426)

I114

After regulation 5A(8) of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (personal data breach) insert—

9

This regulation does not apply in relation to any personal data breach which is to be notified to the Investigatory Powers Commissioner in accordance with a code of practice made under the Investigatory Powers Act 2016.