Legalize / United Kingdom / Statutory-Instrument

The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019

Type Statutory-Instrument

Publication 2019-02-28

Last updated 2025-02-27

State In force

Department King's Printer of Acts of Parliament

Source legislation.gov.uk

PDF Download

articles Not indexed

Reform history JSON API

(1) Regulation 39 of the Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005 (sensitive information) is amended as follows.

(2) In paragraphs (1B)(a) and (1C)(a), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (1D)—

(a) in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the words from “ “the GDPR”” to “(14) of that Act);”;

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

(4) In paragraph (1E), for “GDPR” (in both places) substitute “ UK GDPR ”.

Register of Judgments, Orders and Fines Regulations 2005

62

In regulation 3 of the Register of Judgments, Orders and Fines Regulations 2005 (interpretation) —

(a) in the definition of “the data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the definition of “the GDPR”;

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

National Assembly for Wales (Representation of the People) Order 2007

63

(1) Paragraph 14 of Schedule 1 to the National Assembly for Wales (Representation of the People) Order 2007 (absent voting at Assembly elections: conditions on the use, supply and inspection of absent vote records or lists) is amended as follows.

(2) In sub-paragraph (1)(a), for “GDPR” substitute “ UK GDPR ”.

(3) For sub-paragraph (2) substitute—

(2) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

National Assembly for Wales Commission (Crown Status) Order 2007

64

In article 5 of the National Assembly for Wales Commission (Crown Status) Order 2007 (Data Protection Act 2018) —

(a) in paragraph (2)(a), (d) and (e), for “GDPR” substitute “ UK GDPR ”;

(b) omit paragraph (5).

Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007

65

(1) Regulation 18 of the Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007 (conditions on the supply and inspection of absent voter records or lists) is amended as follows.

(2) In paragraph (1)(a), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (2) substitute—

(2) In this regulation, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007

66

(1) Regulation 5 of the Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007 (conditions on the use, supply and disclosure of documents open to public inspection) is amended as follows.

(2) In paragraph (2)(i), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (4) substitute—

(4) In this regulation, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007

67

The Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007 are amended as follows.

68

In regulation 2 (interpretation)—

(a) omit the definition of “the GDPR”;

(b) at the appropriate place insert—

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

69

In regulation 10(2) (duties of Boards of Governors), for “GDPR” substitute “ UK GDPR ”.

Representation of the People (Northern Ireland) Regulations 2008

70

(1) Regulation 118 of the Representation of the People (Northern Ireland) Regulations 2008 (conditions on the use, supply and disclosure of documents open to public inspection) is amended as follows.

(2) In paragraph (2), for “GDPR” substitute “ UK GDPR ”.

(3) For paragraph (4) substitute—

(4) In this regulation, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

Controlled Drugs (Supervision of Management and Use) (Wales) Regulations 2008

71

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

72

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

73

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

74

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

75

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008

76

(1) Regulation 5 of the Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008 (information whose disclosure would be affected by the application of other legislation) is amended as follows.

(2) In paragraph (3B)(a), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (5)—

(a) in the definition of “data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the definition of “the GDPR”;

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

INSPIRE Regulations 2009

77

(1) Regulation 9 of the INSPIRE Regulations 2009 (public access to spatial data sets and spatial data services) is amended as follows.

(2) In paragraph (2)(b), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (8)—

(a) in the definition of “data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the definition of “the GDPR”;

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

(4) In paragraph (9), for “GDPR” (in both places) substitute “ UK GDPR ”.

INSPIRE (Scotland) Regulations 2009

78

(1) Regulation 10 of the INSPIRE (Scotland) Regulations 2009 (public access to spatial data sets and spatial data services) is amended as follows.

(2) In paragraph (2)(b), for “GDPR” substitute “ UK GDPR ”.

(3) In paragraph (7)—

(a) in the definition of “data protection principles”, for “GDPR” substitute “ UK GDPR ”;

(b) omit the definition of “the GDPR”;

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

(4) In paragraph (8), for “GDPR” (in both places) substitute “ UK GDPR ”.

Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009

79

The Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009 are amended as follows.

80

In regulation 2(2) (interpretation)—

(a) omit the words from “ “the GDPR”” to “(14) of that Act);”;

(b) at the appropriate place insert—

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

81

In regulation 25(7) (duty to co-operate by disclosing information as regards relevant persons), for “GDPR” substitute “ UK GDPR ”.

82

In regulation 26(6) (responsible bodies requesting additional information be disclosed about relevant persons), for “GDPR” substitute “ UK GDPR ”.

83

In regulation 29(3) (occurrence reports), for “GDPR” substitute “ UK GDPR ”.

Pharmacy Order 2010

84

The Pharmacy Order 2010 is amended as follows.

85

In article 3(1) (interpretation), at the appropriate place insert—

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

86

In article 9(5) (inspection and enforcement), for “and references to Schedule 2 to the Data Protection Act 2018 have” substitute “ has ”.

87

(1) Article 49 (disclosure of information: general) is amended as follows.

(2) In paragraph (2)(a), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (6).

88

(1) Article 55 (professional performance assessments) is amended as follows.

(2) In paragraph (5)(a), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (9).

Local Elections (Northern Ireland) Order 2010

89

In paragraph 1(1) of Schedule 3 to the Local Elections (Northern Ireland) Order 2010 (access to marked registers and other documents open to public inspection after an election) —

(a) in the definition of “Article 89 GDPR purposes”, for “the GDPR” substitute “ the UK GDPR ”;

(b) omit the definition of “the GDPR”;

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

Pupil Information (Wales) Regulations 2011

90

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

91

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Police and Crime Commissioner Elections Order 2012

92

The Police and Crime Commissioner Elections Order 2012 is amended as follows.

93

(1) Schedule 2 (absent voting in Police and Crime Commissioner elections) is amended as follows.

(2) In paragraph 20 (absent voter lists: supply of copies etc)—

(a) in sub-paragraph (8)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (11) substitute—

(11) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

(3) In paragraph 24 (restriction on use of absent voter records or lists or the information contained in them)—

(a) in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (4) substitute—

(4) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

94

(1) Schedule 10 (access to marked registers and other documents open to public inspection after an election) is amended as follows.

(2) In paragraph 5 (restriction on use of absent voter records or lists or the information contained in them)—

(a) in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (5) substitute—

(5) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

Neighbourhood Planning (Referendums) Regulations 2012

95

In paragraph 29(1) of Schedule 6 to the Neighbourhood Planning (Referendums) Regulations 2012 (interpretation of Part 8) —

(a) in the definition of “Article 89 GDPR purposes”, for “the GDPR” substitute “ the UK GDPR ”;

(b) omit the definition of “the GDPR”;

(d) at the appropriate place insert—

“the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018;

Controlled Drugs (Supervision of Management and Use) Regulations 2013

96

(1) Regulation 20 of the Controlled Drugs (Supervision of Management and Use) Regulations 2013 (information management) is amended as follows.

(2) In paragraph (5), for “GDPR” (in both places) substitute “ UK GDPR ”.

(3) For paragraph (7) substitute—

(7) In this regulation, “personal data” and “the UK GDPR” have the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2), (10) and (14) of that Act).

Small and Medium Sized Business (Credit Information) Regulations 2015

97

(1) Regulation 15 of the Small and Medium Sized Business (Credit Information) Regulations 2015 (access to and correction of information for individuals and small firms) is amended as follows.

(2) In paragraph (1), for “GDPR” substitute “ UK GDPR ”.

(3) Omit paragraph (4).

Scottish Parliament (Elections etc) Order 2015

98

The Scottish Parliament (Elections etc) Order 2015 is amended as follows.

99

(1) Schedule 3 (absent voting) is amended as follows.

(2) In paragraph 16 (absent voting lists: supply of copies etc)—

(a) in sub-paragraph (4)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (11) substitute—

(11) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

(3) In paragraph 20 (restriction on use of absent voting lists)—

(a) in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (4) substitute—

(4) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

100

In Schedule 8 (access to marked registers and other documents open to public inspection after an election), in paragraph 5 (restriction on use of documents)—

(a) in sub-paragraph (3)(a), for “GDPR” substitute “ UK GDPR ”;

(b) for sub-paragraph (5) substitute—

(5) In this paragraph, “the UK GDPR” has the meaning given in section 3(10) of the Data Protection Act 2018.

Electronic Identification and Trust Services for Electronic Transactions Regulations 2016

101

In Schedule 2 to the Electronic Identification and Trust Services for Electronic Transactions Regulations 2016 (Information Commissioner's enforcement powers) , in paragraph 16(a) and (b) (modification of section 159 of the Data Protection Act 2018), for “GDPR” substitute “ UK GDPR ”.

Court Files Privileged Access Rules (Northern Ireland) 2016

102

The Court Files Privileged Access Rules (Northern Ireland) 2016 are amended as follows.

103

In rule 2 (interpretation), at the appropriate place insert—

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

104

In rule 5(a) (information that may be released), for “GDPR” substitute “ UK GDPR ”.

105

In rule 7(2)(a) (provision of information), for “GDPR” substitute “ UK GDPR ”.

Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017

106

The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 are amended as follows.

107

In regulation 3(1) (interpretation)—

(a) omit the words from “ “the GDPR” to “(14) of that Act);”;

(b) at the appropriate place insert—

“the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act);

108

In regulation 16(8)(b) (risk assessment by the Treasury and Home Office), for “GDPR” substitute “ UK GDPR ”.

109

In regulation 17(9)(b) (risk assessment by supervisory authorities), for “GDPR” substitute “ UK GDPR ”.

110

In regulation 41 (data protection), in paragraphs (3)(a), (6), (7), (8) and (9), for “GDPR” substitute “ UK GDPR ”.

PART 4 — Modification

111

(1) Legislation described in sub-paragraph (2) has effect on and after IP completion day as if it were modified in accordance with sub-paragraphs (3) and (4) (but see sub-paragraph (5)).

(2) That legislation is—

(a) subordinate legislation made on or before IP completion day;

(b) primary legislation passed or made on or before IP completion day”.

(3) The following have effect as references to the UK GDPR—

(a) references to the GDPR as defined in section 3(10) of the 2018 Act or as defined for the purposes of Parts 5 to 7 of the 2018 Act;

(b) other references to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).

(4) References described in sub-paragraph (3) which are references to the GDPR or the Regulation read with Chapter 2 of Part 2 of the 2018 Act have effect as references to the UK GDPR read with Part 2 of that Act.

(5) Sub-paragraphs (1) to (4) have effect unless the context otherwise requires and, in particular, do not affect references to the Regulation mentioned in sub-paragraph (3)(b) as it has effect in EU law.

(6) Paragraph 2 of Schedule 21 to the 2018 Act (inserted by these Regulations) has effect in relation to references to the UK GDPR arising as a result of this paragraph as it has effect in relation of other references to the UK GDPR.

(7) In this paragraph—

“primary legislation” has the meaning given in section 211 of the 2018 Act;

“references” includes any references, however expressed;

“subordinate legislation” has the meaning given in the Interpretation Act 1978.

PART 5 — Supplementary

Interpretation of references to enactments

112

Nothing in Parts 2 to 4 of this Schedule is to be read as implying anything about whether references to an enactment or statutory provision (whether in Acts or instruments amended by those Parts of this Schedule or elsewhere) include the UK GDPR or other assimilated direct legislation.

SCHEDULE 4 — Amendments consequential on provisions of the 2018 Act

Anti-terrorism, Crime and Security Act 2001

1

(1) Part 1 of Schedule 4 to the Anti-terrorism, Crime and Security Act 2001 (extension of existing disclosure powers) is amended as follows.

(2) Omit paragraph 42.

(3) After paragraph 53F insert—

(53G) Section 132(1) of the Data Protection Act 2018.

Investigatory Powers Act 2016

2

In section 202(4) of the Investigatory Powers Act 2016 (restriction on use of class BDP warrants) , in the definition of “sensitive personal data”, for “section 2(a) to (f) of the Data Protection Act 1998” substitute “ section 86(7)(a) to (e) of the Data Protection Act 2018 ”.

Data Protection Act 2018

3

In Schedule 19 to the Data Protection Act 2018 (minor and consequential amendments) , omit paragraphs 76 and 201.

Signed

We consent to the making of these Regulations

Paul Maynard — Jeremy Quin — Two of the Lords Commissioners of Her Majesty's Treasury — 2019-02-27

Margot James — Minister of State — 2019-02-28

Explanatory note

(This note is not part of the Regulations)

Footnotes

2018 c. 16.

2018 c. 12.

1972. c. 68. Section 2 was amended by section 27(1)(a) of the Legislative and Regulatory Reform Act 2006 (c.51) and Part 1 of the Schedule to the European Union (Amendment) Act 2008 (c. 7).

S.I. 2003/2426.

These regulations make a further amendment to this provision (see Sch. 3, para. 3).

OJ L 281, 23.11.1995, p31-50.

OJ L 178, 17/07/2000, p1-16.

S.I. 2002/2013.

Section 17A is inserted into the 2018 Act by these Regulations (see Sch. 2, para. 23).

OJ L 201, 31.7.2002, p37-47.

Such domestic legislation includes the Privacy and Electronic Communications (EC Directive) Regulations 2003 (S.I. 2003/2426) (“PECR”) and the Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000 (S.I. 2000/2699) (as amended by PECR).

Section 17B is inserted into the 2018 Act by these Regulations (see Sch. 2, para. 23).

Section 17C is inserted into the 2018 Act by these Regulations (see Sch. 2, para. 23).

Section 119A is inserted into the 2018 Act by these Regulations (see Sch. 2, para. 51).

The definition of the EU GDPR is inserted into section 3 of the 2018 Act by these Regulations (see Sch. 2, para. 4(5)).

Section 205(4) is inserted into the 2018 Act by these Regulations (see Sch. 2, para. 85(7)).

OJ L 215, 25.8.2000, p. 1-3.

OJ L 2, 4.1.2002, p. 13-16.

OJ L 168, 05.07.2003, p. 19-22.

OJ L 308, 25.11.2003 p. 27-28.

OJ L 151, 30.4.2004. , p. 48-51.

OJ L 138, 28.5.2008, p. 21-23.

OJ L 58, 9.3.2010, p. 17-19.

OJ L 277, 21.10.2010, p. 27-29.

OJ L 27, 1.2.2011, p. 39-42

OJ L 227, 23.8.2012, p. 11-14.

OJ L 28, 30.1.2013, p. 12-14.

OJ L 207, 1.8.2016, p. 1-112.

OJ L 181, 4.7.2001, p. 19-31.

OJ L 385, 29.12.2004, p. 74-84.

OJ L 39, 12.2.2010, p. 5-18.

OJ L 344, 17.12.2016, p. 83-91.

OJ L 344, 17.12.2016, p. 100-101.

1974 c. 39.

S.I. 1976/1213 (N.I. 22)

S.R. (N.I.) 2007 No. 43.

S.I. 2008/1741.

S.I. 2008/3239 (W.286).

S.R. (N.I.) 2008 No. 3.

S.I. 2009/3157.

S.S.I. 2009/440.

S.R. (N.I.) 2009 No. 225.

S.I. 2010/231.

S.I. 2010/2977.

S.I. 2011/1942 (W.209).

S.R. (N.I.) 2016 No. 123.

Editorial notes

2018 c. 16.

2018 c. 12.

c. 68. Section 2 was amended by section 27(1)(a) of the Legislative and Regulatory Reform Act 2006 (c.51) and Part 1 of the Schedule to the European Union (Amendment) Act 2008 (c. 7).

S.I. 2003/2426.

These regulations make a further amendment to this provision (see Sch. 3, para. 3).

OJ L 281, 23.11.1995, p31-50.

OJ L 178, 17/07/2000, p1-16.

S.I. 2002/2013.

Section 17A is inserted into the 2018 Act by these Regulations (see Sch. 2, para. 23).

100

OJ L 201, 31.7.2002, p37-47.

101

102

Section 17B is inserted into the 2018 Act by these Regulations (see Sch. 2, para. 23).

103

Section 17C is inserted into the 2018 Act by these Regulations (see Sch. 2, para. 23).

104

Section 119A is inserted into the 2018 Act by these Regulations (see Sch. 2, para. 51).

105

The definition of the EU GDPR is inserted into section 3 of the 2018 Act by these Regulations (see Sch. 2, para. 4(5)).

106

Section 205(4) is inserted into the 2018 Act by these Regulations (see Sch. 2, para. 85(7)).

107

OJ L 215, 25.8.2000, p. 1-3.

108

OJ L 2, 4.1.2002, p. 13-16.

109

OJ L 168, 05.07.2003, p. 19-22.

110

OJ L 308, 25.11.2003 p. 27-28.

111

OJ L 151, 30.4.2004. , p. 48-51.

112

OJ L 138, 28.5.2008, p. 21-23.

113

OJ L 58, 9.3.2010, p. 17-19.

114

OJ L 277, 21.10.2010, p. 27-29.

115

OJ L 27, 1.2.2011, p. 39-42

116

OJ L 227, 23.8.2012, p. 11-14.

117

OJ L 28, 30.1.2013, p. 12-14.

118

OJ L 181, 4.7.2001, p. 19-31.

119

OJ L 385, 29.12.2004, p. 74-84.

120

OJ L 39, 12.2.2010, p. 5-18.

121

OJ L 344, 17.12.2016, p. 83-91.

122

OJ L 344, 17.12.2016, p. 100-101.

123

1974 c. 39.

124

S.I. 1976/1213 (N.I. 22)

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

S.R. (N.I.) 2007 No. 43.

160

S.I. 2008/1741.

161

S.R. (N.I.) 2008 No. 3.

162

S.I. 2009/3157.

163

S.S.I. 2009/440.

164

S.R. (N.I.) 2009 No. 225.

165

166

167

168

169

170

171

172

173

S.R. (N.I.) 2016 No. 123.

174

175

176

177

178

Sch. 2 para. 59 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

179

Sch. 3 para. 68 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

180

Sch. 1 para. 71 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

181

Sch. 1 para. 3 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

182

Sch. 1 para. 13 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

183

Sch. 1 para. 51 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

184

Sch. 3 para. 78 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

185

Sch. 2 para. 11 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

186

Words in Sch. 1 para. 80 substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 4(6)

187

Sch. 1 para. 5 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

188

Sch. 3 para. 50 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

189

Sch. 3 para. 12 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

190

Words in reg. 5(2) substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 3(3)

191

Reg. 8 in force at 29.3.2019, see reg. 1(3)

192

Sch. 2 para. 61 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

193

Sch. 2 para. 1 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

194

Sch. 3 para. 37 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

195

Sch. 2 para. 63 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

196

Sch. 2 para. 40 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

197

Sch. 2 para. 101 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

198

Sch. 3 para. 88 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

199

Sch. 2 para. 90 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

200

Sch. 1 para. 19 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

201

Words in reg. 5(4) substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 3(5)

202

Sch. 1 para. 46 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

203

Sch. 1 para. 35 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

204

Sch. 2 para. 71 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

205

Sch. 3 para. 44 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

206

Words in Sch. 2 para. 85 substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 5(2)

207

Words in Sch. 1 para. 6(13) substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 4(3)(b)

208

Sch. 1 para. 6 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

209

Sch. 2 para. 25 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

210

Sch. 2 para. 48 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

211

Sch. 3 para. 95 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

212

Sch. 3 para. 109 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

213

Sch. 1 para. 73 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

214

Sch. 3 para. 1 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

215

Sch. 3 para. 18 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

216

Sch. 2 para. 70 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

217

Sch. 1 para. 69 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

218

Sch. 3 para. 24 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

219

Words in Sch. 2 para. 102 substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 5(4)(k)(ii)

220

Sch. 3 para. 101 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

221

Sch. 3 para. 26 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

222

Sch. 3 para. 58 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

223

Words in Sch. 2 para. 102 inserted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 5(4)(g)(iv)

224

Sch. 3 para. 57 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

225

Sch. 3 para. 99 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

226

227

Sch. 2 para. 65 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

228

Sch. 2 para. 84 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

229

Sch. 2 para. 58 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

230

Sch. 1 para. 11 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

231

Sch. 4 para. 2 in force at 29.3.2019, see reg. 1(3)

232

Sch. 2 para. 66 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

233

234

Sch. 1 para. 74 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

235

Sch. 3 para. 1(aa) inserted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 6(2)(a)

236

Sch. 3 para. 39 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

237

Sch. 2 para. 73 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

238

Sch. 3 para. 22 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

239

Sch. 1 para. 53 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

240

Sch. 3 para. 107 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

241

242

Sch. 2 para. 89 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

243

Sch. 1 para. 45 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

244

Sch. 3 para. 35 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

245

Sch. 3 para. 100 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

246

247

Sch. 3 para. 1(s)-(u) inserted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 6(2)(d)

248

Sch. 2 para. 53 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

249

Sch. 2 para. 81 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

250

Reg. 7 in force at 29.3.2019, see reg. 1(3)

251

Words in reg. 5(3) substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 3(4)

252

Sch. 1 para. 18 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

253

Sch. 1 para. 49 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

254

Sch. 4 para. 3 in force at 29.3.2019, see reg. 1(3)

255

Sch. 3 para. 14 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

256

Sch. 1 para. 4 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

257

Sch. 1 para. 43 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

258

Sch. 3 para. 25 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

259

Sch. 1 para. 79 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

260

Sch. 3 para. 49 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

261

Sch. 3 para. 45 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

262

Sch. 2 para. 43 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

263

Sch. 2 para. 1 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

264

Sch. 2 para. 28 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

265

Sch. 2 para. 74 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

266

Sch. 2 para. 47 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

267

Sch. 3 para. 67 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

268

Sch. 2 para. 98 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

269

Sch. 1 para. 17 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

270

Sch. 1 para. 41 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

271

Words in Sch. 3 para. 2 substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 6(3)(a)

272

Sch. 3 para. 105 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

273

Sch. 2 para. 50 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

274

275

Sch. 3 para. 83 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

276

Sch. 3 para. 98 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

277

Words in Sch. 3 para. 111(1) substituted (31.12.2020 immediately before IP completion day) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 (S.I. 2020/1586), regs. 1(2), 6(4)(a)

278

279

Sch. 3 para. 56 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

280

Sch. 3 para. 89 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

281

Sch. 3 para. 110 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

282

Sch. 1 para. 12 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

283

284

Sch. 2 para. 30 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

285

Sch. 2 para. 85 in force at 31.12.2020 on IP completion day (in accordance with 2020 c. 1, Sch. 5 para. 1(1)), see reg. 1(2)

Reading this document does not replace reading the official text published on legislation.gov.uk. Contains public sector information licensed under the Open Government Licence v3.0. We assume no responsibility for any inaccuracies arising from the conversion of the original CLML XML to this format.

This text is published under legislation.gov.uk's own terms of reuse, not a Legalize or public-domain licence. legislation.gov.uk
Open Government Licence v3.0 (attribution required)
© Crown and database right. Derived from content available under the Open Government Licence v3.0 from legislation.gov.uk.

The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019

Register of Judgments, Orders and Fines Regulations 2005

62

National Assembly for Wales (Representation of the People) Order 2007

63

National Assembly for Wales Commission (Crown Status) Order 2007

64

Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007

65

Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007

66

Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007

67

68

69

Representation of the People (Northern Ireland) Regulations 2008

70

Controlled Drugs (Supervision of Management and Use) (Wales) Regulations 2008

71

72

73

74

75

Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008

76

INSPIRE Regulations 2009

77

INSPIRE (Scotland) Regulations 2009

78

Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009

79

80

81

82

83

Pharmacy Order 2010

84

85

86

87

88

Local Elections (Northern Ireland) Order 2010

89

Pupil Information (Wales) Regulations 2011

90

91

Police and Crime Commissioner Elections Order 2012

92

93

94

Neighbourhood Planning (Referendums) Regulations 2012

95

Controlled Drugs (Supervision of Management and Use) Regulations 2013

96

Small and Medium Sized Business (Credit Information) Regulations 2015

97

Scottish Parliament (Elections etc) Order 2015

98

99

100

Electronic Identification and Trust Services for Electronic Transactions Regulations 2016

101

Court Files Privileged Access Rules (Northern Ireland) 2016

102

103

104

105

Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017

106

107

108

109

110

PART 4 — Modification

References to the GDPR

111

PART 5 — Supplementary

Interpretation of references to enactments

112

SCHEDULE 4 — Amendments consequential on provisions of the 2018 Act