Paragraph 413 I1

In regulation 17(9) (risk assessment by supervisory authorities), for “the Data Protection Act 1998 or any other enactment” substitute

“—

(a)

the Data Protection Act 2018 or any other enactment, or

(b)

the GDPR.”