- Made under
- European Union (Withdrawal) Act 2018
- Status
- Amended (in force with amendments)
What it defines
Regulations creating concrete business duties or carrying penalties, grouped as the instrument is structured. Titles link to the source text — blue means you’re leaving for legislation.gov.uk.
8 other provisions — procedural and definitional
s.001
Citation, commencement and extent
s.002
Interpretation
s.003
Amendment of the UK GDPR
s.004
Amendment of the Data Protection Act 2018
s.005
GDPR merger modifications
s.006
Consequential amendments of other legislation
s.007
Amendments consequential on provisions of the 2018 Act
s.008
Amendment of the Privacy and Electronic Communications Regulations 2003
Schedules
Schedules
0 of 297 shown297 other schedules
s.sch001
Introduction
s.sch001
(1) Article 10 is amended as follows.
s.sch001
Chapter 3 (rights of the data subject)
s.sch001
(1) Article 13 is amended as follows.
s.sch001
(1) Article 14 is amended as follows.
s.sch001
In Article 15(1)(f), for “a supervisory authority” substitute “ the...
s.sch001
(1) Article 17 is amended as follows.
s.sch001
In Article 18(2), omit “of the Union or of a...
s.sch001
In Article 21(5)— (a) omit “and notwithstanding Directive 2002/58/EC ,”;...
s.sch001
(1) Article 22 is amended as follows.
s.sch001
(1) Article 23 is amended as follows.
s.sch001
In the title of the Regulation, for “, and repealing...
s.sch001
Chapter 4 (controller and processor)
s.sch001
(1) Article 27 is amended as follows.
s.sch001
(1) Article 28 is amended as follows.
s.sch001
In Article 29, for “Union or Member State law” substitute...
s.sch001
(1) Article 30 is amended as follows.
s.sch001
(1) Article 31 is amended as follows.
s.sch001
In Article 32(4), for “Union or Member State law” substitute...
s.sch001
(1) Article 33 is amended as follows.
s.sch001
In Article 34(4), for “the supervisory authority” substitute “ the...
s.sch001
(1) Article 35 is amended as follows.
s.sch001
Chapter 1 (general provisions)
s.sch001
(1) Article 36 is amended as follows.
s.sch001
(1) Article 37 is amended as follows.
s.sch001
In Article 38(5), for “Union or Member State law” substitute...
s.sch001
(1) Article 39 is amended as follows.
s.sch001
(1) Article 40 is amended as follows.
s.sch001
(1) Article 41 is amended as follows.
s.sch001
(1) Article 42 is amended as follows.
s.sch001
(1) Article 43 is amended as follows.
s.sch001
Chapter 5 (transfers of personal data to third countries or international organisations)
s.sch001
(1) Article 46 is amended as follows.
s.sch001
(1) Article 2 is amended as follows.
s.sch001
(1) Article 47 is amended as follows.
s.sch001
Omit Article 48.
s.sch001
(1) Article 49 is amended as follows.
s.sch001
In Article 50, for “the Commission and supervisory authorities” substitute...
s.sch001
Chapter 6 (independent supervisory authorities)
s.sch001
(1) Article 51 is amended as follows.
s.sch001
(1) Article 52 is amended as follows.
s.sch001
Omit Article 53.
s.sch001
Omit Article 54.
s.sch001
In the heading of section 2 of Chapter 6, for...
s.sch001
(1) Article 3 is amended as follows.
s.sch001
Omit Article 55.
s.sch001
Omit Article 56.
s.sch001
(1) Article 57 is amended as follows.
s.sch001
(1) Article 58 is amended as follows.
s.sch001
In Article 59— (a) for “Each supervisory authority” substitute “...
s.sch001
Chapter 7 (cooperation and consistency)
s.sch001
Chapter 8 (remedies, liability and penalties)
s.sch001
(1) Article 78 is amended as follows.
s.sch001
(1) Article 79 is amended as follows.
s.sch001
(1) Article 80 is amended as follows.
s.sch001
(1) Article 4 is amended as follows.
s.sch001
Omit Article 81.
s.sch001
In Article 82, omit paragraph 6.
s.sch001
(1) Article 83 is amended as follows.
s.sch001
In Article 84, for paragraphs 1 and 2 substitute— Part...
s.sch001
Chapter 9 (provisions relating to specific processing situations)
s.sch001
(1) Article 86 is amended as follows.
s.sch001
After Article 86 insert— Article 86A Processing and national security...
s.sch001
Omit Article 87.
s.sch001
Omit Article 88.
s.sch001
(1) Article 89 is amended as follows.
s.sch001
Chapter 2 (principles)
s.sch001
Omit Article 90.
s.sch001
Omit Article 91.
s.sch001
Chapter 10 (delegated acts and implementing acts)
s.sch001
Chapter 11 (final provisions)
s.sch001
(1) Article 95 is amended as follows.
s.sch001
(1) Article 96 is amended as follows.
s.sch001
Omit Article 97.
s.sch001
Omit Article 98.
s.sch001
Omit Article 99.
s.sch001
Omit the sentence following Article 99.
s.sch001
(1) Article 8 is amended as follows.
s.sch001
Supplementary
s.sch001
(1) Article 9 is amended as follows.
s.sch002
Introduction
s.sch002
(1) Section 7 is amended as follows.
s.sch002
(1) Schedule 19 is amended as follows.
s.sch002
(1) Schedule 20 is amended as follows.
s.sch002
After Schedule 20 insert— SCHEDULE 21 Further transitional provision etc Section...
s.sch002
In section 8, for “GDPR” substitute “ UK GDPR ”....
s.sch002
Omit section 9.
s.sch002
(1) Section 10 is amended as follows.
s.sch002
In section 11, in subsection (1) (in both places) and...
s.sch002
In section 12(1)(a) and (b), for “GDPR” substitute “ UK...
s.sch002
In section 13(2) and (3), for “GDPR” substitute “ UK...
s.sch002
(1) Section 14 is amended as follows.
s.sch002
For the italic heading before section 15 substitute “ Exemptions...
s.sch002
(1) Section 15 is amended as follows.
s.sch002
Part 1 (preliminary)
s.sch002
(1) Section 16 is amended as follows.
s.sch002
For the italic heading before section 17 substitute “ Certification...
s.sch002
(1) Section 17 is amended as follows.
s.sch002
Before section 18 (but after the italic heading before it)...
s.sch002
(1) Section 18 is amended as follows.
s.sch002
In section 19(2), for “GDPR” substitute “ UK GDPR ”....
s.sch002
In section 20— (a) for “this Chapter” (in both places)...
s.sch002
For the heading of Chapter 3 substitute “ Exemptions for...
s.sch002
For the italic heading before section 21 substitute “ Definitions...
s.sch002
(1) Section 21 is amended as follows.
s.sch002
In section 2(1) and (2), for “GDPR, the applied GDPR”...
s.sch002
Omit section 22 and the italic heading before it.
s.sch002
Omit section 23.
s.sch002
(1) Section 24 is amended as follows.
s.sch002
(1) Section 25 is amended as follows.
s.sch002
(1) Section 26 is amended as follows.
s.sch002
In section 27(5), for “the applied GDPR” substitute “ the...
s.sch002
(1) Section 28 is amended as follows.
s.sch002
Part 3 (law enforcement processing) (other than Schedules 7 and 8)
s.sch002
In section 48, omit subsection (8).
s.sch002
In section 67, omit subsection (8).
s.sch002
(1) Section 3 is amended as follows.
s.sch002
(1) Section 73 is amended as follows.
s.sch002
Omit section 74.
s.sch002
After section 74 insert— Transfers based on adequacy regulations (1) The Secretary of State may by regulations specify any...
s.sch002
In section 76(1)(c), omit “a member State or”.
s.sch002
Section 77(8), for “member States” substitute “ the United Kingdom...
s.sch002
(1) Section 78 is amended as follows.
s.sch002
(1) Section 80 is amended as follows.
s.sch002
Part 5 (Information Commissioner) (other than Schedules 12 to 14)
s.sch002
(1) Section 116 is amended as follows.
s.sch002
(1) Section 117 is amended as follows.
s.sch002
Part 2 (general processing) (other than Schedules 1 to 6)
s.sch002
(1) Section 118 is amended as follows.
s.sch002
After section 119 insert— Standard clauses for transfers to third...
s.sch002
(1) Section 120 is amended as follows.
s.sch002
In section 123(7), for “GDPR” (in both places) substitute “...
s.sch002
In section 129(1), for “GDPR” substitute “ UK GDPR ”....
s.sch002
In section 132(2), omit paragraph (d).
s.sch002
In section 135(4), for “GDPR” substitute “ UK GDPR ”....
s.sch002
In section 136(1)(b), for “GDPR” substitute “ UK GDPR ”....
s.sch002
In section 139(2), for “GDPR” substitute “ UK GDPR ”....
s.sch002
Part 6 (enforcement) (other than Schedules 15 to 17)
s.sch002
(1) Section 5 is amended as follows.
s.sch002
In section 143(9), for “GDPR” substitute “ UK GDPR ”....
s.sch002
In section 149(2)(a), (b), (c) and (e), (3) and (4)(b)...
s.sch002
In section 151(1)(b) and (8)(a), for “GDPR” substitute “ UK...
s.sch002
In section 155(2)(a), for “GDPR” (in both places) substitute “...
s.sch002
(1) Section 157 is amended as follows.
s.sch002
In section 159(1) and (2), for “GDPR” substitute “ UK...
s.sch002
(1) Section 165 is amended as follows.
s.sch002
In section 166(1), for “GDPR” substitute “ UK GDPR ”....
s.sch002
In section 167(4), for “GDPR” substitute “ UK GDPR ”....
s.sch002
(1) Section 168 is amended as follows.
s.sch002
For the heading of Chapter 2 substitute “ The UK...
s.sch002
In section 169(1), for “GDPR” substitute “ UK GDPR ”....
s.sch002
In section 170(7), for “GDPR” substitute “ UK GDPR ”....
s.sch002
In section 171(8)(a), for “GDPR” substitute “ UK GDPR ”....
s.sch002
In section 173(2)(a) and (b), for “GDPR” substitute “ UK...
s.sch002
In section 174(2)(a) and (b), for “GDPR” substitute “ UK...
s.sch002
In section 180(2)(d) and (e), for “GDPR” substitute “ UK...
s.sch002
In section 181, in the definition of “representative”, for “GDPR”...
s.sch002
Part 7 (supplementary and final provision) (other than Schedules 18 to 20)
s.sch002
(1) Section 183 is amended as follows.
s.sch002
In section 185(4)(a) and (b), for “GDPR” substitute “ UK...
s.sch002
In the italic heading before section 6, for “GDPR” substitute...
s.sch002
(1) Section 186 is amended as follows.
s.sch002
(1) Section 187 is amended as follows.
s.sch002
In section 188(2), for “GDPR” substitute “ UK GDPR ”....
s.sch002
(1) Section 189 is amended as follows.
s.sch002
In section 190(1), for “GDPR” (in each place) substitute “...
s.sch002
(1) Section 205 is amended as follows.
s.sch002
(1) The Table in section 206 is amended as follows....
s.sch002
(1) Section 207 is amended as follows.
s.sch002
In section 209(2), (3) and (4), for “GDPR” substitute “...
s.sch002
In section 210(2) and (3), for “GDPR” substitute “ UK...
s.sch002
In section 6(1) and (2), for “GDPR” substitute “ UK...
s.sch002
(1) Section 213 is amended as follows.
s.sch002
Schedules
s.sch002
(1) Schedule 2 is amended as follows.
s.sch002
(1) Schedule 3 is amended as follows.
s.sch002
(1) Schedule 4 is amended as follows.
s.sch002
In Schedule 5, in the following provisions, for “national accreditation...
s.sch002
Omit Schedule 6.
s.sch002
(1) Schedule 13 is amended as follows.
s.sch002
In Schedule 14, omit Part 1.
s.sch002
(1) Schedule 18 is amended as follows.
s.sch003
Revocation of Regulations and Decisions
s.sch003
(1) Section 35A (General Medical Council's power to require disclosure...
s.sch003
In Schedule 8 (access to marked registers and other documents...
s.sch003
Electronic Identification and Trust Services for Electronic Transactions Regulations 2016
s.sch003
Court Files Privileged Access Rules (Northern Ireland) 2016
s.sch003
In rule 2 (interpretation), at the appropriate place insert— “the...
s.sch003
In rule 5(a) (information that may be released), for “GDPR”...
s.sch003
In rule 7(2)(a) (provision of information), for “GDPR” substitute “...
s.sch003
Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
s.sch003
In regulation 3(1) (interpretation)— (a) omit the words from “...
s.sch003
In regulation 16(8)(b) (risk assessment by the Treasury and Home...
s.sch003
In regulation 17(9)(b) (risk assessment by supervisory authorities), for “GDPR”...
s.sch003
In section 55(1) (interpretation), at the appropriate place insert— “the...
s.sch003
In regulation 41 (data protection), in paragraphs (3)(a), (6), (7),...
s.sch003
References to the GDPR
s.sch003
Interpretation of references to enactments
s.sch003
In paragraph 9B of Schedule 1 (incidental powers of the...
s.sch003
In paragraph 5A of Schedule 4 (professional performance assessments and...
s.sch003
Dentists Act 1984
s.sch003
(1) Section 33B (the General Dental Council's power to require...
s.sch003
(1) Section 36Y (the General Dental Council's power to require...
s.sch003
In section 53(1) (interpretation), at the appropriate place insert— “the...
s.sch003
Opticians Act 1989
s.sch003
Immigration and Asylum Act 1999
s.sch003
Revocation of provisions of EEA agreement
s.sch003
Freedom of Information Act 2000
s.sch003
Health and Personal Social Services Act (Northern Ireland) 2001
s.sch003
Freedom of Information (Scotland) Act 2002
s.sch003
Mental Health (Care and Treatment) (Scotland) Act 2003
s.sch003
Crime and Courts Act 2013
s.sch003
Small Business, Enterprise and Employment Act 2015
s.sch003
Social Security (Scotland) Act 2018
s.sch003
Channel Tunnel (International Arrangements) Order 1993
s.sch003
Channel Tunnel (Miscellaneous Provisions) Order 1994
s.sch003
Scottish Parliamentary Corporate Body (Crown Status) Order 1999
s.sch003
Consumer Credit Act 1974
s.sch003
Northern Ireland Assembly Commission (Crown Status) Order 1999
s.sch003
Representation of the People (England and Wales) Regulations 2001
s.sch003
(1) Regulation 3(1) (interpretation) is amended as follows.
s.sch003
In regulation 92(2)(ba) (interpretation and application of Part VI etc),...
s.sch003
Representation of the People (Scotland) Regulations 2001
s.sch003
(1) Regulation 3(1) (interpretation) is amended as follows.
s.sch003
In regulation 92(2)(ba) (interpretation of Part VI etc), for “the...
s.sch003
Financial Services and Markets Act 2000 (Disclosure of Confidential Information) Regulations 2001
s.sch003
Nursing and Midwifery Order 2001
s.sch003
(1) Article 3 (the Nursing and Midwifery Council and its...
s.sch003
In section 157(2A)(a) (duty to disclose name etc of agency),...
s.sch003
(1) Article 25 (the Council's power to require disclosure of...
s.sch003
In article 40(6) (Directive 2005/36/EC: designation of competent authority etc),...
s.sch003
In Schedule 4 (interpretation), at the appropriate place insert— “the...
s.sch003
Electronic Commerce (EC Directive) Regulations 2002
s.sch003
Privacy and Electronic Communications (EC Directive) Regulations 2003
s.sch003
Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003
s.sch003
(1) Article 8 (exercise of powers by French officers in...
s.sch003
(1) Article 11 (exercise of powers by UK immigration officers...
s.sch003
Pupils' Educational Records (Scotland) Regulations 2003
s.sch003
In regulation 2 (interpretation)— (a) omit the definition of “the...
s.sch003
In section 159(1)(a) (correction of wrong information), for “GDPR” substitute...
s.sch003
In regulation 6(aa) and (ab) (circumstances where information should not...
s.sch003
In regulation 9(1A) (in both places) and (1B), for “GDPR”...
s.sch003
Environmental Information Regulations 2004
s.sch003
(1) Regulation 2 (interpretation) is amended as follows.
s.sch003
In regulation 13 (personal data), in paragraphs (2B)(a), (3A)(a), (5B)(b)...
s.sch003
Environmental Information (Scotland) Regulations 2004
s.sch003
(1) Regulation 2 (interpretation) is amended as follows.
s.sch003
In regulation 11 (personal data), in paragraphs (3B), (4A)(a) and...
s.sch003
Licensing Act 2003 (Personal Licences) Regulations 2005
s.sch003
Education (Pupil Information) (England) Regulations 2005
s.sch003
In section 189(1) (definitions)— (a) omit the definition of “the...
s.sch003
Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005
s.sch003
Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005
s.sch003
Register of Judgments, Orders and Fines Regulations 2005
s.sch003
National Assembly for Wales (Representation of the People) Order 2007
s.sch003
National Assembly for Wales Commission (Crown Status) Order 2007
s.sch003
Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007
s.sch003
Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007
s.sch003
Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007
s.sch003
In regulation 2 (interpretation)— (a) omit the definition of “the...
s.sch003
In regulation 10(2) (duties of Boards of Governors), for “GDPR”...
s.sch003
Pharmacy (Northern Ireland) Order 1976
s.sch003
Representation of the People (Northern Ireland) Regulations 2008
s.sch003
Controlled Drugs (Supervision of Management and Use) (Wales) Regulations 2008
s.sch003
(1) Regulation 2(1) (interpretation) is amended as follows.
s.sch003
In regulation 25(7) (duty to co-operate by disclosing information as...
s.sch003
In regulation 26(6) (responsible bodies requesting additional information be disclosed...
s.sch003
In regulation 29(3) (occurrence reports) — (a) in the English...
s.sch003
Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008
s.sch003
INSPIRE Regulations 2009
s.sch003
INSPIRE (Scotland) Regulations 2009
s.sch003
Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009
s.sch003
Medical Act 1983
s.sch003
In regulation 2(2) (interpretation)— (a) omit the words from “...
s.sch003
In regulation 25(7) (duty to co-operate by disclosing information as...
s.sch003
In regulation 26(6) (responsible bodies requesting additional information be disclosed...
s.sch003
In regulation 29(3) (occurrence reports), for “GDPR” substitute “ UK...
s.sch003
Pharmacy Order 2010
s.sch003
In article 3(1) (interpretation), at the appropriate place insert— “the...
s.sch003
In article 9(5) (inspection and enforcement), for “and references to...
s.sch003
(1) Article 49 (disclosure of information: general) is amended as...
s.sch003
(1) Article 55 (professional performance assessments) is amended as follows....
s.sch003
Local Elections (Northern Ireland) Order 2010
s.sch003
(1) Section 29E (evidence) is amended as follows.
s.sch003
Pupil Information (Wales) Regulations 2011
s.sch003
(1) In paragraph (5)(a) and (b) —
s.sch003
Police and Crime Commissioner Elections Order 2012
s.sch003
(1) Schedule 2 (absent voting in Police and Crime Commissioner...
s.sch003
(1) Schedule 10 (access to marked registers and other documents...
s.sch003
Neighbourhood Planning (Referendums) Regulations 2012
s.sch003
Controlled Drugs (Supervision of Management and Use) Regulations 2013
s.sch003
Small and Medium Sized Business (Credit Information) Regulations 2015
s.sch003
Scottish Parliament (Elections etc) Order 2015
s.sch003
(1) Schedule 3 (absent voting) is amended as follows.
s.sch004
Anti-terrorism, Crime and Security Act 2001
s.sch004
Investigatory Powers Act 2016
s.sch004
Data Protection Act 2018
Connected legislation
The wider family of instruments made under the same parent Act.
Road Vehicles and Non-Road Mobile Machinery (Type-Approval) (Amendment) (EU Exit) Regulations 2019
SI 2019
Duty extraction and severity labels are Guvnor’s analysis of the instrument, not the instrument itself. Always verify against the linked source text.