SCHEDULES

SCHEDULE 6The applied GDPR and the applied Chapter 2

PART 1Modifications to the GDPR

Section 3 of Chapter IV of the GDPR (controller and processor: data protection impact assessment and prior consultation)

27

In Article 35 (data protection impact assessment), omit paragraphs 4, 5, 6 and 10.

28

In Article 36 (prior consultation)—

(a)

for paragraph 4 substitute—

“4

The Secretary of State must consult the Commissioner during the preparation of any proposal for a legislative measure which relates to processing.”;

(b)

omit paragraph 5.