Schedule 19, Part 2, paragraph 429

Schedule 1 (content of agreements) is amended as follows. In paragraph 34 (interpretation)— in sub-paragraph (1)— omit “Subject to sub-paragraph (3),”, before paragraph (a) insert— “controller” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(6) and (14) of that Act); “data protection officer” means a person designated as a data protection officer under the data protection legislation; for paragraph (d) substitute— “personal data” and “processing” have the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2), (4) and (14) of that Act). omit sub-paragraphs (2) and (3), in sub-paragraph (4), for “the 1998 Act and any directly applicable EU instrument relating to data protection” substitute — the data protection legislation, or any directly applicable EU legislation which is not part of the data protection legislation but which relates to data protection. in sub-paragraph (6)(b), for “data controllers” substitute “ controllers ”. In paragraph 37(2)(a) (processing and access of data), for “the 1998 Act, and any directly applicable EU instrument relating to data protection;” substitute — the data protection legislation, and any directly applicable EU legislation which is not part of the data protection legislation but which relates to data protection; In paragraph 61(3) (variation of agreement: general)— omit paragraph (b), and after paragraph (d) (but before the final “and”) insert— the data protection legislation; any directly applicable EU legislation which is not part of the data protection legislation but which relates to data protection;

← 428 · All articles · 1 →

Source: legislation.gov.uk · retrieved 2026-09-04