{
  "url": "https://openlegislation.uk/data-protection-act-2018/schedule-19/paragraph-413",
  "json_url": "https://openlegislation.uk/data-protection-act-2018/schedule-19/paragraph-413.json",
  "legislation": "ukpga/2018/12",
  "legislation_title": "Data Protection Act 2018",
  "legislation_url": "https://openlegislation.uk/data-protection-act-2018",
  "path": "schedule/19/paragraph/413",
  "kind": "paragraph",
  "number": "413",
  "heading": null,
  "text": "In regulation 17(9) (risk assessment by supervisory authorities), for “the Data Protection Act 1998 or any other enactment” substitute\n“—\n(a) the Data Protection Act 2018 or any other enactment, or\n(b) the GDPR.”",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "I",
      "label": "I1",
      "text": "Sch. 19 para. 413 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(g)"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/ukpga/2018/12/schedule/19/paragraph/413",
    "retrieved_at": "2026-10-29T09:04:55.804064+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}