# Data Protection Act 2018, Paragraph 15


(1) Schedule 2C (Directive 2005/36/EC: European professional card) is amended as follows.
(2) In paragraph 8(1) (access to data), for “Directive 95/46/EC” substitute “ the GDPR ”.
(3) In paragraph 9 (processing data), omit sub-paragraph (2) (deeming the Society to be the controller for the purposes of Directive 95/46/EC).

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/19/paragraph/15 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-19/paragraph-15
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.