402.—(1) Subpart C (management of air traffic controller training organisations) of Annex 3 is amended as follows.
(2) In point ATCO.OR.C.005(b), for “competent authority” substitute “CAA”.
(3) In point ATCO.OR.C.020(c), for “the applicable national data protection law” substitute “data protection legislation within the meaning of section 3(9) of the Data Protection Act 2018 (c.12)”.