Data Protection Act 2018 (c. 12)

SCHEDULES

SCHEDULE 6 The applied GDPR and the applied Chapter 2

PART 1 Modifications to the GDPR

Chapter V of the GDPR (transfers of data to third countries or international organisations)

35 In Article 45 (transfers on the basis of an adequacy decision)—

(a) in paragraph 1, after “decided” insert “in accordance with Article 45 of the GDPR”;

(b) after paragraph 1 insert—

“1A But a transfer of personal data to a third country or international organisation must not take place under paragraph 1, if the Commission’s decision in relation to the third country (including a territory or sector within it) or the international organisation—

(a) is suspended,

(b) has been amended, or

(c) has been repealed,

by the Commission under Article 45(5) of the GDPR.”;

(c) omit paragraphs 2 to 8;

(d) in paragraph 9, for “of this Article” substitute “of Article 45 of the GDPR”.