SCHEDULES

SCHEDULE 6The applied GDPR and the applied Chapter 2

PART 1Modifications to the GDPR

Section 2 of Chapter VI of the GDPR (independent supervisory authorities: competence, tasks and powers)

44

In Article 55 (competence)—

(a)

in paragraph 1, omit “on the territory of its own Member State”;

(b)

omit paragraph 2.

45

Omit Article 56 (competence of the lead supervisory authority).

46

In Article 57 (tasks)—

(a)

in paragraph 1, in the first sentence, for “each supervisory authority shall on its territory” substitute “ the Commissioner is to ”;

(b)

in paragraph 1, in point (e), omit “and, if appropriate, cooperate with the supervisory authorities in other Member States to that end”;

(c)

in paragraph 1, in point (f), omit “or coordination with another supervisory authority”;

(d)

in paragraph 1, omit points (g), (k) and (t);

(e)

after paragraph 1 insert—

“1A

In this Article and Article 58, references to “this Regulation” have effect as references to this Regulation and section 28(3) of the 2018 Act.”

47

In Article 58 (powers)—

(a)

in paragraph 1, in point (a), omit “, and, where applicable, the controller's or the processor's representative”;

(b)

in paragraph 1, in point (f), for “Union or Member State procedural law” substitute “ domestic law ”;

(c)

in paragraph 3, in point (b), for “the Member State government” substitute “ the Secretary of State ”;

(d)

in paragraph 3, omit point (c);

(e)

omit paragraphs 4 to 6.

48

In Article 59 (activity reports)—

(a)

for “, the government and other authorities as designated by Member State law” substitute “ and the Secretary of State ”;

(b)

omit “, to the Commission and to the Board”.