Paragraph 22 Freedom of Information (Scotland) Act 2002

in the definition of “the data protection principles”, for “GDPR” substitute “UK GDPR”;

omit the words from ““the GDPR”, “personal data”, “processing”” to “(14) of that Act);”;

at the appropriate places insert—

• ““personal data” and “processing” have the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(2), (4) and (14) of that Act);”;

• ““the UK GDPR” has the same meaning as in Parts 5 to 7 of the Data Protection Act 2018 (see section 3(10) and (14) of that Act).”.