Paragraph 412 I1

In regulation 16(8) (risk assessment by the Treasury and Home Office), for “the Data Protection Act 1998 or any other enactment” substitute

“—

(a)

the Data Protection Act 2018 or any other enactment, or

(b)

the GDPR.”