Data Protection Act 2018 (c. 12)

SCHEDULES

SCHEDULE 6 The applied GDPR and the applied Chapter 2

PART 1 Modifications to the GDPR

Section 5 of Chapter IV of the GDPR (controller and processor: codes of conduct and certification)

33 In Article 42 (certification)—

(a) in paragraph 1—

(i) for “The Member States, the supervisory authorities, the Board and the Commission” substitute “The Commissioner”;

(ii) omit “, in particular at Union level,”;

(b) omit paragraph 2;

(c) in paragraph 5, omit “or by the Board pursuant to Article 63. Where the criteria are approved by the Board, this may result in a common certification, the European Data Protection Seal”;

(d) omit paragraph 8.