Article 135 Data protectionX1

F1United Kingdom data protection legislation, as defined in section 3(9) of the Data Protection Act 2018 shall apply to the extent that the information processed through the F2appropriate computerised information management system contains personal data as defined in F3section 3(2) of the Data Protection Act 2018 and in point (a) of Article 2 of Regulation (EC) No 45/2001.

In relation to their responsibilities to transmit the relevant information to the appropriate computerised information management system and the processing of any personal data that might result from that activity, the competent authorities F4... shall be regarded as controllers as defined in F5section 1(1) of the Data Protection Act 1998 or section 3(6) of the Data Protection Act 2018, as the case may be.

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

The F8competent authority may restrict the rights and obligations under Article 4(1), Article 11, Article 12(1) and Articles 13 to 17 of Regulation (EC) No 45/2001 where such restriction constitutes a necessary measure to safeguard the interests referred to in points (a) and (e) of Article 20(1) of that Regulation during the period in which actions are being planned or performed to verify compliance with food or feed law or to ensure the enforcement of food or feed law in the specific case to which the information relates.