Data Protection Act 2018 (c. 12)

SCHEDULES

SCHEDULE 19 U.K. Minor and consequential amendments

PART 2 U.K. Amendments of other legislation

National Health Service (General Medical Services Contracts) (Scotland) Regulations 2018 (S.S.I. 2018/66) U.K.

422 U.K. The National Health Service (General Medical Services Contracts) (Scotland) Regulations 2018 are amended as follows.

Commencement Information

I1 Sch. 19 para. 422 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

423 (1) Regulation 1 (citation and commencement) is amended as follows. U.K.

(2) In paragraph (2), omit “Subject to paragraph (3),”.

(3) Omit paragraph (3).

Commencement Information

I2 Sch. 19 para. 423 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

424 U.K. In regulation 3(1) (interpretation)—

(a) omit the definition of “the 1998 Act”,

(b) at the appropriate place insert—

““the data protection legislation” has the same meaning as in the Data Protection Act 2018 (see section 3 of that Act);”, and

(c) omit the definition of “GDPR”.

Commencement Information

I3 Sch. 19 para. 424 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)

425 (1) Schedule 6 (other contractual terms) is amended as follows. U.K.

(2) In paragraph 63(2) (interpretation: general), for “the 1998 Act or any directly applicable EU instrument relating to data protection” substitute “—

(a) the data protection legislation, or

(b) any directly applicable EU legislation which is not part of the data protection legislation but which relates to data protection.”

(3) For paragraph 64 (meaning of data controller etc.) substitute—

“Meaning of controller etc. U.K.

64A For the purposes of this Part—

• “controller” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(6) and (14) of that Act);

• “data protection officer” means a person designated as a data protection officer under the data protection legislation;

• “personal data” and “processing” have the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2), (4) and (14) of that Act).”

(4) In paragraph 65(2)(b) (roles, responsibilities and obligations: general), for “data controllers” substitute “ controllers ”.

(5) In paragraph 69(2)(a) (processing and access of data), for “the 1998 Act, and any directly applicable EU instrument relating to data protection;” substitute “—

(i) the data protection legislation, and

(ii) any directly applicable EU legislation which is not part of the data protection legislation but which relates to data protection;”.

(6) In paragraph 94(4) (variation of a contract: general)—

(a) omit paragraph (b), and

(b) after paragraph (d) (but before the final “and”) insert—

“(da) the data protection legislation;

(db) any directly applicable EU legislation which is not part of the data protection legislation but which relates to data protection;”.

Commencement Information

I4 Sch. 19 para. 425 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)