170.—(1) Article 132 (processing of personal data) is amended as follows.
(2) In paragraph 1—
(a)for “Member States” substitute “the Secretary of State and the CAA”;
(b)for the words from “the national laws” to the end substitute “data protection legislation within the meaning of section 3(9) of the Data Protection Act 2018 (c.12)”.
(3) Omit paragraph 2.