SCHEDULE 1Amendments of the UK GDPR

59.

(1)

Article 80 is amended as follows.

(2)

In paragraph 1—

(a)

for the words from “a not-for profit” to “their personal data” substitute “ a body or other organisation which meets the conditions in section 187(3) and (4) of the 2018 Act ”;

(b)

omit “where provided for by Member State law”.

(3)

In paragraph 2—

(a)

for “Member States” substitute “ The Secretary of State ”;

(b)

omit “, in that Member State,”;

(c)

for “the supervisory authority which is competent pursuant to Article 77” substitute “ the Commissioner ”.

(4)

After that paragraph insert—

“3.

The Secretary of State may exercise the power under paragraph 2 of this Article only by making regulations under section 190 of the 2018 Act.”.