SCHEDULE 2Amendments of the Data Protection Act 2018

I187

1

Section 207 is amended as follows.

2

In subsection (1), for “(2) and (3)” substitute “ (1A) and (2) ”.

3

After subsection (1) insert—

1A

In the case of the processing of personal data to which Part 2 (the UK GDPR) applies, it applies to the types of such processing to which the UK GDPR applies by virtue of Article 3 of the UK GDPR.

4

In subsection (2), for “It applies to the processing of personal data” substitute “ In the case of the processing of personal data to which Part 2 does not apply, it applies where such processing is carried out ”.

5

Omit subsection (3).

6

In subsection (4), for “Subsections (1) to (3)” substitute “ Subsections (1), (1A) and (2) ”.

7

Omit subsection (6).

8

In subsection (7), omit the words after paragraph (d).