OpenLegislation

The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 in Scotland

S.I. 2019/419 · Made 28 February 2019 · Extends to United Kingdom

Up to date with all changes known to legislation.gov.uk, revised to 27 February 2025.

Exiting The European Union

Data Protection

Electronic Communications

Made 28th February 2019

Coming into force in accordance with regulation 1(2) and (3)

The Secretary of State makes these Regulations in exercise of the powers conferred by sections 8(1) and 23(1) of, paragraph 1(1) of Schedule 4 to and paragraph 21 of Schedule 7 to the European Union (Withdrawal) Act 2018 M1, section 211(2) of the Data Protection Act 2018 M2 and section 2(2) of the European Communities Act 1972 M3.

In accordance with paragraph 3(1) of Schedule 4 to the European Union (Withdrawal) Act 2018, these Regulations are made with the consent of the Treasury.

The Secretary of State is a Minister designated for purposes of section 2(2) of the European Communities Act 1972 in respect of matters relating to electronic communications.

In accordance with paragraphs 1(1) and 12(1) of Schedule 7 to the European Union (Withdrawal) Act 2018, section 211(5) of the Data Protection Act 2018 and paragraph 2(2) of Schedule 2 to the European Communities Act 1972 a draft of this instrument has been laid before, and approved by a resolution of, each House of Parliament.

Annotations to the whole text

Marginal citations

M1

2018 c. 16.

M2

2018 c. 12.

M3

1972. c. 68. Section 2 was amended by section 27(1)(a) of the Legislative and Regulatory Reform Act 2006 (c.51) and Part 1 of the Schedule to the European Union (Amendment) Act 2008 (c. 7).

Contents

  1. 1Citation, commencement and extent
  2. 2Interpretation
  3. 3Amendment of the UK GDPR
  4. 4Amendment of the Data Protection Act 2018
  5. 5GDPR merger modifications
  6. 6Consequential amendments of other legislation
  7. 7Amendments consequential on provisions of the 2018 Act
  8. 8Amendment of the Privacy and Electronic Communications Regulations 2003
  9. Signature
  10. Schedule 1: Amendments of the UK GDPR
  11. 1Introduction
  12. 2Paragraph 2
  13. 3Chapter 1 (general provisions)
  14. 4Paragraph 4
  15. 5Paragraph 5
  16. 6Paragraph 6
  17. 7Chapter 2 (principles)
  18. 8Paragraph 8
  19. 9Paragraph 9
  20. 10Paragraph 10
  21. 11Chapter 3 (rights of the data subject)
  22. 12Paragraph 12
  23. 13Paragraph 13
  24. 14Paragraph 14
  25. 15Paragraph 15
  26. 16Paragraph 16
  27. 17Paragraph 17
  28. 18Paragraph 18
  29. 19Paragraph 19
  30. 20Chapter 4 (controller and processor)
  31. 21Paragraph 21
  32. 22Paragraph 22
  33. 23Paragraph 23
  34. 24Paragraph 24
  35. 25Paragraph 25
  36. 26Paragraph 26
  37. 27Paragraph 27
  38. 28Paragraph 28
  39. 29Paragraph 29
  40. 30Paragraph 30
  41. 31Paragraph 31
  42. 32Paragraph 32
  43. 33Paragraph 33
  44. 34Paragraph 34
  45. 35Paragraph 35
  46. 36Paragraph 36
  47. 37Paragraph 37
  48. 38Chapter 5 (transfers of personal data to third countries or international organisations)
  49. 39Paragraph 39
  50. 40Paragraph 40
  51. 41Paragraph 41
  52. 42Paragraph 42
  53. 43Paragraph 43
  54. 44Chapter 6 (independent supervisory authorities)
  55. 45Paragraph 45
  56. 46Paragraph 46
  57. 47Paragraph 47
  58. 48Paragraph 48
  59. 49Paragraph 49
  60. 50Paragraph 50
  61. 51Paragraph 51
  62. 52Paragraph 52
  63. 53Paragraph 53
  64. 54Paragraph 54
  65. 55Chapter 7 (cooperation and consistency)
  66. 56Chapter 8 (remedies, liability and penalties)
  67. 57Paragraph 57
  68. 58Paragraph 58
  69. 59Paragraph 59
  70. 60Paragraph 60
  71. 61Paragraph 61
  72. 62Paragraph 62
  73. 63Paragraph 63
  74. 64Chapter 9 (provisions relating to specific processing situations)
  75. 65Paragraph 65
  76. 66Paragraph 66
  77. 67Paragraph 67
  78. 68Paragraph 68
  79. 69Paragraph 69
  80. 70Paragraph 70
  81. 71Paragraph 71
  82. 72Chapter 10 (delegated acts and implementing acts)
  83. 73Chapter 11 (final provisions)
  84. 74Paragraph 74
  85. 75Paragraph 75
  86. 76Paragraph 76
  87. 77Paragraph 77
  88. 78Paragraph 78
  89. 79Paragraph 79
  90. 80Supplementary
  91. Schedule 2: Amendments of the Data Protection Act 2018
  92. 1Introduction
  93. 2Part 1 (preliminary)
  94. 3Paragraph 3
  95. 4Paragraph 4
  96. 5Part 2 (general processing) (other than Schedules 1 to 6)
  97. 6Paragraph 6
  98. 7Paragraph 7
  99. 8Paragraph 8
  100. 9Paragraph 9
  101. 10Paragraph 10
  102. 11Paragraph 11
  103. 12Paragraph 12
  104. 13Paragraph 13
  105. 14Paragraph 14
  106. 15Paragraph 15
  107. 16Paragraph 16
  108. 17Paragraph 17
  109. 18Paragraph 18
  110. 19Paragraph 19
  111. 20Paragraph 20
  112. 21Paragraph 21
  113. 22Paragraph 22
  114. 23Paragraph 23
  115. 24Paragraph 24
  116. 25Paragraph 25
  117. 26Paragraph 26
  118. 27Paragraph 27
  119. 28Paragraph 28
  120. 29Paragraph 29
  121. 30Paragraph 30
  122. 31Paragraph 31
  123. 32Paragraph 32
  124. 33Paragraph 33
  125. 34Paragraph 34
  126. 35Paragraph 35
  127. 36Paragraph 36
  128. 37Part 3 (law enforcement processing) (other than Schedules 7 and 8)
  129. 38Paragraph 38
  130. 39Paragraph 39
  131. 40Paragraph 40
  132. 41Paragraph 41
  133. 42Paragraph 42
  134. 43Paragraph 43
  135. 44Paragraph 44
  136. 45Paragraph 45
  137. 46Paragraph 46
  138. 47Part 5 (Information Commissioner) (other than Schedules 12 to 14)
  139. 48Paragraph 48
  140. 49Paragraph 49
  141. 50Paragraph 50
  142. 51Paragraph 51
  143. 52Paragraph 52
  144. 53Paragraph 53
  145. 54Paragraph 54
  146. 55Paragraph 55
  147. 56Paragraph 56
  148. 57Paragraph 57
  149. 58Paragraph 58
  150. 59Part 6 (enforcement) (other than Schedules 15 to 17)
  151. 60Paragraph 60
  152. 61Paragraph 61
  153. 62Paragraph 62
  154. 63Paragraph 63
  155. 64Paragraph 64
  156. 65Paragraph 65
  157. 66Paragraph 66
  158. 67Paragraph 67
  159. 68Paragraph 68
  160. 69Paragraph 69
  161. 70Paragraph 70
  162. 71Paragraph 71
  163. 72Paragraph 72
  164. 73Paragraph 73
  165. 74Paragraph 74
  166. 75Paragraph 75
  167. 76Paragraph 76
  168. 77Part 7 (supplementary and final provision) (other than Schedules 18 to 20)
  169. 78Paragraph 78
  170. 79Paragraph 79
  171. 80Paragraph 80
  172. 81Paragraph 81
  173. 85Paragraph 85
  174. 86Paragraph 86
  175. 87Paragraph 87
  176. 88Paragraph 88
  177. 89Paragraph 89
  178. 90Paragraph 90
  179. 91Schedules
  180. 92Paragraph 92
  181. 93Paragraph 93
  182. 94Paragraph 94
  183. 95Paragraph 95
  184. 96Paragraph 96
  185. 97Paragraph 97
  186. 98Paragraph 98
  187. 99Paragraph 99
  188. 100Paragraph 100
  189. 101Paragraph 101
  190. 102Paragraph 102
  191. Schedule 3: Consequential amendments of other legislation
  192. Part 1: Revocation of retained EU law
  193. 1Revocation of Regulations and Decisions
  194. 2Revocation of provisions of EEA agreement
  195. Part 2: Amendments of primary legislation
  196. 3Consumer Credit Act 1974
  197. 4Paragraph 4
  198. 5Paragraph 5
  199. 6Paragraph 6
  200. 7Pharmacy (Northern Ireland) Order 1976
  201. 8Medical Act 1983
  202. 9Paragraph 9
  203. 10Paragraph 10
  204. 11Paragraph 11
  205. 12Paragraph 12
  206. 13Paragraph 13
  207. 14Dentists Act 1984
  208. 15Paragraph 15
  209. 16Paragraph 16
  210. 17Paragraph 17
  211. 18Opticians Act 1989
  212. 19Immigration and Asylum Act 1999
  213. 20Freedom of Information Act 2000
  214. 21Health and Personal Social Services Act (Northern Ireland) 2001
  215. 22Freedom of Information (Scotland) Act 2002
  216. 23Mental Health (Care and Treatment) (Scotland) Act 2003
  217. 24Crime and Courts Act 2013
  218. 25Small Business, Enterprise and Employment Act 2015
  219. 26Social Security (Scotland) Act 2018
  220. Part 3: Amendments of other legislation
  221. 27Channel Tunnel (International Arrangements) Order 1993
  222. 28Channel Tunnel (Miscellaneous Provisions) Order 1994
  223. 29Scottish Parliamentary Corporate Body (Crown Status) Order 1999
  224. 30Northern Ireland Assembly Commission (Crown Status) Order 1999
  225. 31Representation of the People (England and Wales) Regulations 2001
  226. 32Paragraph 32
  227. 33Paragraph 33
  228. 34Representation of the People (Scotland) Regulations 2001
  229. 35Paragraph 35
  230. 36Paragraph 36
  231. 37Financial Services and Markets Act 2000 (Disclosure of Confidential Information) Regulations 2001
  232. 38Nursing and Midwifery Order 2001
  233. 39Paragraph 39
  234. 40Paragraph 40
  235. 41Paragraph 41
  236. 42Paragraph 42
  237. 43Electronic Commerce (EC Directive) Regulations 2002
  238. 44Privacy and Electronic Communications (EC Directive) Regulations 2003
  239. 45Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003
  240. 46Paragraph 46
  241. 47Paragraph 47
  242. 48Pupils' Educational Records (Scotland) Regulations 2003
  243. 49Paragraph 49
  244. 50Paragraph 50
  245. 51Paragraph 51
  246. 52Environmental Information Regulations 2004
  247. 53Paragraph 53
  248. 54Paragraph 54
  249. 55Environmental Information (Scotland) Regulations 2004
  250. 56Paragraph 56
  251. 57Paragraph 57
  252. 58Licensing Act 2003 (Personal Licences) Regulations 2005
  253. 59Education (Pupil Information) (England) Regulations 2005
  254. 60Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005
  255. 61Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005
  256. 62Register of Judgments, Orders and Fines Regulations 2005
  257. 63National Assembly for Wales (Representation of the People) Order 2007
  258. 64National Assembly for Wales Commission (Crown Status) Order 2007
  259. 65Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007
  260. 66Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007
  261. 67Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007
  262. 68Paragraph 68
  263. 69Paragraph 69
  264. 70Representation of the People (Northern Ireland) Regulations 2008
  265. 71Controlled Drugs (Supervision of Management and Use) (Wales) Regulations 2008 Repealed
  266. 72Paragraph 72 Repealed
  267. 73Paragraph 73 Repealed
  268. 74Paragraph 74 Repealed
  269. 75Paragraph 75 Repealed
  270. 76Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008
  271. 77INSPIRE Regulations 2009
  272. 78INSPIRE (Scotland) Regulations 2009
  273. 79Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009
  274. 80Paragraph 80
  275. 81Paragraph 81
  276. 82Paragraph 82
  277. 83Paragraph 83
  278. 84Pharmacy Order 2010
  279. 85Paragraph 85
  280. 86Paragraph 86
  281. 87Paragraph 87
  282. 88Paragraph 88
  283. 89Local Elections (Northern Ireland) Order 2010
  284. 90Pupil Information (Wales) Regulations 2011 Not yet in force
  285. 91Paragraph 91 Not yet in force
  286. 92Police and Crime Commissioner Elections Order 2012
  287. 93Paragraph 93
  288. 94Paragraph 94
  289. 95Neighbourhood Planning (Referendums) Regulations 2012
  290. 96Controlled Drugs (Supervision of Management and Use) Regulations 2013
  291. 97Small and Medium Sized Business (Credit Information) Regulations 2015
  292. 98Scottish Parliament (Elections etc) Order 2015
  293. 99Paragraph 99
  294. 100Paragraph 100
  295. 101Electronic Identification and Trust Services for Electronic Transactions Regulations 2016
  296. 102Court Files Privileged Access Rules (Northern Ireland) 2016
  297. 103Paragraph 103
  298. 104Paragraph 104
  299. 105Paragraph 105
  300. 106Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
  301. 107Paragraph 107
  302. 108Paragraph 108
  303. 109Paragraph 109
  304. 110Paragraph 110
  305. Part 4: Modification
  306. 111References to the GDPR
  307. Part 5: Supplementary
  308. 112Interpretation of references to enactments
  309. Schedule 4: Amendments consequential on provisions of the 2018 Act
  310. 1Anti-terrorism, Crime and Security Act 2001
  311. 2Investigatory Powers Act 2016
  312. 3Data Protection Act 2018
  313. Explanatory note