SCHEDULE 1Amendments of the UK GDPR

Chapter 4 (controller and processor)29

1

Article 35 is amended as follows.

2

In paragraph 4—

a

in the first sentence, for “The supervisory authority” substitute “The Commissioner”;

b

omit the second sentence.

3

In paragraph 5—

a

in the first sentence, for “The supervisory authority” substitute “The Commissioner”;

b

omit the second sentence.

4

Omit paragraph 6.

5

For paragraph 10 substitute—

10

In the case of processing pursuant to point (c) or (e) of Article 6(1), paragraphs 1 to 7 of this Article do not apply if a data protection impact assessment has already been carried out for the processing as part of a general impact assessment required by domestic law, unless domestic law provides otherwise.