SCHEDULE 3Consequential amendments of other legislation

PART 2Amendments of primary legislation

Freedom of Information (Scotland) Act 2002I122

1

Section 38 of the Freedom of Information (Scotland) Act 2002 (personal information) M1 is amended as follows.

2

In subsections (2B) and (3A)(a), for “GDPR” substitute “ UK GDPR ”.

3

In subsection (5)—

a

in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

b

omit the words from “ “the GDPR”, “personal data”, “processing”” to “(14) of that Act);”;

c

at the appropriate places insert—

“personal data” and “processing” have the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2), (4) and (14) of that Act);

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act).

4

In subsection (5A), for “GDPR” (in both places) substitute “ UK GDPR ”.