Data Protection Act 2018 (c. 12)

SCHEDULES

SCHEDULE 6 U.K. The applied GDPR and the applied Chapter 2

PART 1 U.K. Modifications to the GDPR

Section 1 of Chapter IV of the GDPR (controller and processor: general obligations) U.K.

24 U.K. In Article 28 (processor)—

(a) in paragraph 3, in point (a), for “Union or Member State law to which the processor is subject” substitute “ domestic law ”;

(b) in paragraph 3, in the second subparagraph, for “other Union or Member State data protection provisions” substitute “ any other rule of domestic law relating to data protection ”;

(c) in paragraph 6, for “paragraphs 7 and 8” substitute “ paragraph 8 ”;

(d) omit paragraph 7;

(e) in paragraph 8, omit “and in accordance with the consistency mechanism referred to in Article 63”.

Commencement Information

I1 Sch. 6 para. 24 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(b)