OpenLegislation

The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019

S.I. 2019/419 · Made 28 February 2019 · Extends to United Kingdom

Up to date with all changes known to legislation.gov.uk, revised to 27 February 2025.

Exiting The European Union

Data Protection

Electronic Communications

Made 28th February 2019

Coming into force in accordance with regulation 1(2) and (3)

The Secretary of State makes these Regulations in exercise of the powers conferred by sections 8(1) and 23(1) of, paragraph 1(1) of Schedule 4 to and paragraph 21 of Schedule 7 to the European Union (Withdrawal) Act 2018 M1, section 211(2) of the Data Protection Act 2018 M2 and section 2(2) of the European Communities Act 1972 M3.

In accordance with paragraph 3(1) of Schedule 4 to the European Union (Withdrawal) Act 2018, these Regulations are made with the consent of the Treasury.

The Secretary of State is a Minister designated for purposes of section 2(2) of the European Communities Act 1972 in respect of matters relating to electronic communications.

In accordance with paragraphs 1(1) and 12(1) of Schedule 7 to the European Union (Withdrawal) Act 2018, section 211(5) of the Data Protection Act 2018 and paragraph 2(2) of Schedule 2 to the European Communities Act 1972 a draft of this instrument has been laid before, and approved by a resolution of, each House of Parliament.

Annotations to the whole text

Marginal citations

M1

2018 c. 16.

M2

2018 c. 12.

M3

1972. c. 68. Section 2 was amended by section 27(1)(a) of the Legislative and Regulatory Reform Act 2006 (c.51) and Part 1 of the Schedule to the European Union (Amendment) Act 2008 (c. 7).

Contents

  1. 1Citation, commencement and extent
  2. 2Interpretation
  3. 3Amendment of the UK GDPR
  4. 4Amendment of the Data Protection Act 2018
  5. 5GDPR merger modifications
  6. 6Consequential amendments of other legislation
  7. 7Amendments consequential on provisions of the 2018 Act
  8. 8Amendment of the Privacy and Electronic Communications Regulations 2003
  9. Signature
  10. Schedule 1: Amendments of the UK GDPR
  11. 1Introduction
  12. 2Paragraph 2
  13. 3Chapter 1 (general provisions)
  14. 4Paragraph 4
  15. 5Paragraph 5
  16. 6Paragraph 6
  17. 7Chapter 2 (principles)
  18. 8Paragraph 8
  19. 9Paragraph 9
  20. 10Paragraph 10
  21. 11Chapter 3 (rights of the data subject)
  22. 12Paragraph 12
  23. 13Paragraph 13
  24. 14Paragraph 14
  25. 15Paragraph 15
  26. 16Paragraph 16
  27. 17Paragraph 17
  28. 18Paragraph 18
  29. 19Paragraph 19
  30. 20Chapter 4 (controller and processor)
  31. 21Paragraph 21
  32. 22Paragraph 22
  33. 23Paragraph 23
  34. 24Paragraph 24
  35. 25Paragraph 25
  36. 26Paragraph 26
  37. 27Paragraph 27
  38. 28Paragraph 28
  39. 29Paragraph 29
  40. 30Paragraph 30
  41. 31Paragraph 31
  42. 32Paragraph 32
  43. 33Paragraph 33
  44. 34Paragraph 34
  45. 35Paragraph 35
  46. 36Paragraph 36
  47. 37Paragraph 37
  48. 38Chapter 5 (transfers of personal data to third countries or international organisations)
  49. 39Paragraph 39
  50. 40Paragraph 40
  51. 41Paragraph 41
  52. 42Paragraph 42
  53. 43Paragraph 43
  54. 44Chapter 6 (independent supervisory authorities)
  55. 45Paragraph 45
  56. 46Paragraph 46
  57. 47Paragraph 47
  58. 48Paragraph 48
  59. 49Paragraph 49
  60. 50Paragraph 50
  61. 51Paragraph 51
  62. 52Paragraph 52
  63. 53Paragraph 53
  64. 54Paragraph 54
  65. 55Chapter 7 (cooperation and consistency)
  66. 56Chapter 8 (remedies, liability and penalties)
  67. 57Paragraph 57
  68. 58Paragraph 58
  69. 59Paragraph 59
  70. 60Paragraph 60
  71. 61Paragraph 61
  72. 62Paragraph 62
  73. 63Paragraph 63
  74. 64Chapter 9 (provisions relating to specific processing situations)
  75. 65Paragraph 65
  76. 66Paragraph 66
  77. 67Paragraph 67
  78. 68Paragraph 68
  79. 69Paragraph 69
  80. 70Paragraph 70
  81. 71Paragraph 71
  82. 72Chapter 10 (delegated acts and implementing acts)
  83. 73Chapter 11 (final provisions)
  84. 74Paragraph 74
  85. 75Paragraph 75
  86. 76Paragraph 76
  87. 77Paragraph 77
  88. 78Paragraph 78
  89. 79Paragraph 79
  90. 80Supplementary
  91. Schedule 2: Amendments of the Data Protection Act 2018
  92. 1Introduction
  93. 2Part 1 (preliminary)
  94. 3Paragraph 3
  95. 4Paragraph 4
  96. 5Part 2 (general processing) (other than Schedules 1 to 6)
  97. 6Paragraph 6
  98. 7Paragraph 7
  99. 8Paragraph 8
  100. 9Paragraph 9
  101. 10Paragraph 10
  102. 11Paragraph 11
  103. 12Paragraph 12
  104. 13Paragraph 13
  105. 14Paragraph 14
  106. 15Paragraph 15
  107. 16Paragraph 16
  108. 17Paragraph 17
  109. 18Paragraph 18
  110. 19Paragraph 19
  111. 20Paragraph 20
  112. 21Paragraph 21
  113. 22Paragraph 22
  114. 23Paragraph 23
  115. 24Paragraph 24
  116. 25Paragraph 25
  117. 26Paragraph 26
  118. 27Paragraph 27
  119. 28Paragraph 28
  120. 29Paragraph 29
  121. 30Paragraph 30
  122. 31Paragraph 31
  123. 32Paragraph 32
  124. 33Paragraph 33
  125. 34Paragraph 34
  126. 35Paragraph 35
  127. 36Paragraph 36
  128. 37Part 3 (law enforcement processing) (other than Schedules 7 and 8)
  129. 38Paragraph 38
  130. 39Paragraph 39
  131. 40Paragraph 40
  132. 41Paragraph 41
  133. 42Paragraph 42
  134. 43Paragraph 43
  135. 44Paragraph 44
  136. 45Paragraph 45
  137. 46Paragraph 46
  138. 47Part 5 (Information Commissioner) (other than Schedules 12 to 14)
  139. 48Paragraph 48
  140. 49Paragraph 49
  141. 50Paragraph 50
  142. 51Paragraph 51
  143. 52Paragraph 52
  144. 53Paragraph 53
  145. 54Paragraph 54
  146. 55Paragraph 55
  147. 56Paragraph 56
  148. 57Paragraph 57
  149. 58Paragraph 58
  150. 59Part 6 (enforcement) (other than Schedules 15 to 17)
  151. 60Paragraph 60
  152. 61Paragraph 61
  153. 62Paragraph 62
  154. 63Paragraph 63
  155. 64Paragraph 64
  156. 65Paragraph 65
  157. 66Paragraph 66
  158. 67Paragraph 67
  159. 68Paragraph 68
  160. 69Paragraph 69
  161. 70Paragraph 70
  162. 71Paragraph 71
  163. 72Paragraph 72
  164. 73Paragraph 73
  165. 74Paragraph 74
  166. 75Paragraph 75
  167. 76Paragraph 76
  168. 77Part 7 (supplementary and final provision) (other than Schedules 18 to 20)
  169. 78Paragraph 78
  170. 79Paragraph 79
  171. 80Paragraph 80
  172. 81Paragraph 81
  173. 82Paragraph 82
  174. 83Paragraph 83
  175. 84Paragraph 84
  176. 85Paragraph 85
  177. 86Paragraph 86
  178. 87Paragraph 87
  179. 88Paragraph 88
  180. 89Paragraph 89
  181. 90Paragraph 90
  182. 91Schedules
  183. 92Paragraph 92
  184. 93Paragraph 93
  185. 94Paragraph 94
  186. 95Paragraph 95
  187. 96Paragraph 96
  188. 97Paragraph 97
  189. 98Paragraph 98
  190. 99Paragraph 99
  191. 100Paragraph 100
  192. 101Paragraph 101
  193. 102Paragraph 102
  194. Schedule 3: Consequential amendments of other legislation
  195. Part 1: Revocation of retained EU law
  196. 1Revocation of Regulations and Decisions
  197. 2Revocation of provisions of EEA agreement
  198. Part 2: Amendments of primary legislation
  199. 3Consumer Credit Act 1974
  200. 4Paragraph 4
  201. 5Paragraph 5
  202. 6Paragraph 6
  203. 7Pharmacy (Northern Ireland) Order 1976
  204. 8Medical Act 1983
  205. 9Paragraph 9
  206. 10Paragraph 10
  207. 11Paragraph 11
  208. 12Paragraph 12
  209. 13Paragraph 13
  210. 14Dentists Act 1984
  211. 15Paragraph 15
  212. 16Paragraph 16
  213. 17Paragraph 17
  214. 18Opticians Act 1989
  215. 19Immigration and Asylum Act 1999
  216. 20Freedom of Information Act 2000
  217. 21Health and Personal Social Services Act (Northern Ireland) 2001
  218. 22Freedom of Information (Scotland) Act 2002
  219. 23Mental Health (Care and Treatment) (Scotland) Act 2003
  220. 24Crime and Courts Act 2013
  221. 25Small Business, Enterprise and Employment Act 2015
  222. 26Social Security (Scotland) Act 2018
  223. Part 3: Amendments of other legislation
  224. 27Channel Tunnel (International Arrangements) Order 1993
  225. 28Channel Tunnel (Miscellaneous Provisions) Order 1994
  226. 29Scottish Parliamentary Corporate Body (Crown Status) Order 1999
  227. 30Northern Ireland Assembly Commission (Crown Status) Order 1999
  228. 31Representation of the People (England and Wales) Regulations 2001
  229. 32Paragraph 32
  230. 33Paragraph 33
  231. 34Representation of the People (Scotland) Regulations 2001
  232. 35Paragraph 35
  233. 36Paragraph 36
  234. 37Financial Services and Markets Act 2000 (Disclosure of Confidential Information) Regulations 2001
  235. 38Nursing and Midwifery Order 2001
  236. 39Paragraph 39
  237. 40Paragraph 40
  238. 41Paragraph 41
  239. 42Paragraph 42
  240. 43Electronic Commerce (EC Directive) Regulations 2002
  241. 44Privacy and Electronic Communications (EC Directive) Regulations 2003
  242. 45Nationality, Immigration and Asylum Act 2002 (Juxtaposed Controls) Order 2003
  243. 46Paragraph 46
  244. 47Paragraph 47
  245. 48Pupils' Educational Records (Scotland) Regulations 2003
  246. 49Paragraph 49
  247. 50Paragraph 50
  248. 51Paragraph 51
  249. 52Environmental Information Regulations 2004
  250. 53Paragraph 53
  251. 54Paragraph 54
  252. 55Environmental Information (Scotland) Regulations 2004
  253. 56Paragraph 56
  254. 57Paragraph 57
  255. 58Licensing Act 2003 (Personal Licences) Regulations 2005
  256. 59Education (Pupil Information) (England) Regulations 2005
  257. 60Civil Contingencies Act 2004 (Contingency Planning) Regulations 2005
  258. 61Civil Contingencies Act 2004 (Contingency Planning) (Scotland) Regulations 2005
  259. 62Register of Judgments, Orders and Fines Regulations 2005
  260. 63National Assembly for Wales (Representation of the People) Order 2007
  261. 64National Assembly for Wales Commission (Crown Status) Order 2007
  262. 65Representation of the People (Absent Voting at Local Elections) (Scotland) Regulations 2007
  263. 66Representation of the People (Post-Local Government Elections Supply and Inspection of Documents) (Scotland) Regulations 2007
  264. 67Education (Pupil Records and Reporting) (Transitional) Regulations (Northern Ireland) 2007
  265. 68Paragraph 68
  266. 69Paragraph 69
  267. 70Representation of the People (Northern Ireland) Regulations 2008
  268. 71Controlled Drugs (Supervision of Management and Use) (Wales) Regulations 2008 Repealed
  269. 72Paragraph 72 Repealed
  270. 73Paragraph 73 Repealed
  271. 74Paragraph 74 Repealed
  272. 75Paragraph 75 Repealed
  273. 76Energy Order 2003 (Supply of Information) Regulations (Northern Ireland) 2008
  274. 77INSPIRE Regulations 2009
  275. 78INSPIRE (Scotland) Regulations 2009
  276. 79Controlled Drugs (Supervision of Management and Use) Regulations (Northern Ireland) 2009
  277. 80Paragraph 80
  278. 81Paragraph 81
  279. 82Paragraph 82
  280. 83Paragraph 83
  281. 84Pharmacy Order 2010
  282. 85Paragraph 85
  283. 86Paragraph 86
  284. 87Paragraph 87
  285. 88Paragraph 88
  286. 89Local Elections (Northern Ireland) Order 2010
  287. 90Pupil Information (Wales) Regulations 2011 Not yet in force
  288. 91Paragraph 91 Not yet in force
  289. 92Police and Crime Commissioner Elections Order 2012
  290. 93Paragraph 93
  291. 94Paragraph 94
  292. 95Neighbourhood Planning (Referendums) Regulations 2012
  293. 96Controlled Drugs (Supervision of Management and Use) Regulations 2013
  294. 97Small and Medium Sized Business (Credit Information) Regulations 2015
  295. 98Scottish Parliament (Elections etc) Order 2015
  296. 99Paragraph 99
  297. 100Paragraph 100
  298. 101Electronic Identification and Trust Services for Electronic Transactions Regulations 2016
  299. 102Court Files Privileged Access Rules (Northern Ireland) 2016
  300. 103Paragraph 103
  301. 104Paragraph 104
  302. 105Paragraph 105
  303. 106Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
  304. 107Paragraph 107
  305. 108Paragraph 108
  306. 109Paragraph 109
  307. 110Paragraph 110
  308. Part 4: Modification
  309. 111References to the GDPR
  310. Part 5: Supplementary
  311. 112Interpretation of references to enactments
  312. Schedule 4: Amendments consequential on provisions of the 2018 Act
  313. 1Anti-terrorism, Crime and Security Act 2001
  314. 2Investigatory Powers Act 2016
  315. 3Data Protection Act 2018
  316. Explanatory note