Data Protection Bill [HL]

Moved by

Lord Ashton of Hyde

43: Schedule 2, page 129, line 18, leave out “listed GDPR provisions” and insert “GDPR provisions listed in sub-paragraph (1A)”

44: Schedule 2, page 129, line 24, at end insert—

“(1A) The GDPR provisions referred to in sub-paragraph (1) are—

(a) the following provisions of the GDPR (the rights and obligations in which may be restricted by virtue of Article 23(1) of the GDPR)—

(i) Article 13(1) to (3) (personal data collected from data subject: information to be provided);

(ii) Article 14(1) to (4) (personal data collected other than from data subject: information to be provided);

(iii) Article 15(1) to (3) (confirmation of processing, access to data and safeguards for third country transfers);

(iv) Article 17(1) and (2) (right to erasure);

(v) Article 18(1) (restriction of processing);

(vi) Article 21(1) (objections to processing);

(vii) Article 5 (general principles) so far as its provisions correspond to the rights and obligations provided for in the provisions mentioned in sub-paragraphs (i) to (vi); and

(b) the following provisions of the GDPR (the application of which may be adapted by virtue of Article 6(3) of the GDPR)—

(i) Article 5(1)(a) (lawful, fair and transparent processing), other than the lawfulness requirements set out in Article 6;

(ii) Article 5(1)(b) (purpose limitation).

(That is, the listed GDPR provisions other than Article 16 (right to rectification) and Article 20(1) and (2) (right to data portability).)”

45: Schedule 2, page 130, line 2, at end insert “or tribunal”

46: Schedule 2, page 132, line 23, column 2, at end insert—