Schedule 19, Part 2, paragraph 339(6)

After sub-paragraph (1) insert— In this paragraph, “data protection obligations”, in relation to a credit reference agency, means— where the agency carries on business in the United Kingdom, obligations under the data protection legislation (as defined in section 3 of the Data Protection Act 2018); where the agency carries on business in a EEA State other than the United Kingdom, obligations under— the GDPR (as defined in section 3(10) of the Data Protection Act 2018), legislation made in exercise of powers conferred on member States under the GDPR (as so defined), and legislation implementing the Law Enforcement Directive (as defined in section 3(12) of the Data Protection Act 2018).

← 5 · All articles · 340 →

Source: legislation.gov.uk · retrieved 2026-09-04