# Data Protection Act 2018, Paragraph 413


In regulation 17(9) (risk assessment by supervisory authorities), for “the Data Protection Act 1998 or any other enactment” substitute
“—
(a) the Data Protection Act 2018 or any other enactment, or
(b) the GDPR.”

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/19/paragraph/413 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-19/paragraph-413
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.