Section 120 Further international roleI1

The F1Commission must, in relation to third countries and international organisations, take appropriate steps to—

Subsection (1) applies only in connection with the processing of personal data to which the F3UK GDPR does not apply; for the equivalent duty in connection with the processing of personal data to which the UK GDPR applies, see Article 50 of the UK GDPR (international co-operation for the protection of personal data).

The F5Commission may contribute to the activities of international organisations with data protection functions.

The F6Commission must carry out data protection functions which the Secretary of State directs the Commission to carry out for the purpose of enabling Her Majesty's Government in the United Kingdom to give effect to an international obligation of the United Kingdom.

The Commission may provide an authority carrying out data protection functions under the law of a British overseas territory with assistance in carrying out those functions.

The Secretary of State may direct that assistance under subsection (4) is to be provided on terms, including terms as to payment, specified or approved by the Secretary of State.

In this section—

• “data protection functions” means functions relating to the protection of individuals with respect to the processing of personal data;

• “mutual assistance in the enforcement of legislation for the protection of personal data” includes assistance in the form of notification, complaint referral, investigative assistance and information exchange;

• “third country” means a country or territory F7outside the United Kingdom.

Section 3(14)(c) does not apply to references to personal data and the processing of personal data in this section.