# Data Protection Act 2018, Paragraph 21


(1) Section 35A (General Medical Council's power to require disclosure of information) is amended as follows.
(2) In subsection (4), after “enactment” insert “ or the GDPR ”.
(3) For subsection (5A) substitute—
“(5A) In determining for the purposes of subsection (4) whether a disclosure is prohibited, it is to be assumed for the purposes of paragraph 5(2) of Schedule 2 to the Data Protection Act 2018 and paragraph 3(2) of Schedule 11 to that Act (exemptions from certain provisions of the data protection legislation: disclosures required by law) that the disclosure is required by this section.”
(4) In subsection (7), at the end insert—
““the GDPR” and references to Schedule 2 to the Data Protection Act 2018 have the same meaning as in Parts 5 to 7 of that Act (see section 3(10), (11) and (14) of that Act).”

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/19/paragraph/21 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-19/paragraph-21
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.