279U.K.The Nursing and Midwifery Order 2001 is amended as follows.
280(1)Article 3 (the Nursing and Midwifery Council and its Committees) is amended as follows.U.K.
(2)In paragraph (18), after “enactment” insert “ or the GDPR ”.
(3)After paragraph (18) insert—
“(19)In this paragraph, “the GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10), (11) and (14) of that Act).”
281(1)Article 25 (the Council's power to require disclosure of information) is amended as follows.U.K.
(2)In paragraph (3), after “enactment” insert “ or the GDPR ”.
(3)In paragraph (6)—
(a)for “paragraph (5),” substitute “ paragraph (3)— ”, and
(b)at the appropriate place insert—
““the GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10), (11) and (14) of that Act).”
282U.K.In article 39B (European professional card), after paragraph (2) insert—
“(3)For the purposes of Schedule 2B, “the GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), read with Chapter 2 of Part 2 of the Data Protection Act 2018.”
283U.K.In article 40(6) (Directive 2005/36/EC: designation of competent authority etc), at the appropriate place insert—
““the GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), read with Chapter 2 of Part 2 of the Data Protection Act 2018;”.
284(1)Schedule 2B (Directive 2005/36/EC: European professional card) is amended as follows.U.K.
(2)In paragraph 8(1) (access to data) for “Directive 95/46/EC” substitute “ the GDPR ”.
(3)In paragraph 9 (processing data), omit sub-paragraph (2) (deeming the Society to be the controller for the purposes of Directive 95/46/EC).
285(1)The table in Schedule 3 (functions of the Council under Directive 2005/36) is amended as follows.U.K.
(2)In the entry for Article 56(2), in the second column, for “Directive 95/46/EC” substitute “ the GDPR ”.
(3)In the entry for Article 56a(4), in the second column, for “Directive 95/46/EC” substitute “ the GDPR ”.
286U.K.In Schedule 4 (interpretation), omit the definition of “Directive 95/46/EC”.