Statutory Instruments
2023 No. 1417
Retained Eu Law Reform
Data Protection
The Data Protection (Fundamental Rights and Freedoms) (Amendment) Regulations 2023
Made
18th December 2023
Coming into force in accordance with regulation 1(2)
The Secretary of State makes these Regulations in exercise of the powers conferred by section 14(1), (2) and (7) and section 20(1)(b) of the Retained EU Law (Revocation and Reform) Act 2023 (“ the 2023 Act ”)( 1 ).
The Secretary of State is a relevant national authority for the purposes of section 14(1) and (2) of the 2023 Act( 2 ).
In accordance with paragraph 5(5) of Schedule 5 to the 2023 Act, a draft of this instrument has been laid before Parliament and approved by a resolution of each House of Parliament.
Citation, commencement and extent
1. —(1) These Regulations may be cited as the Data Protection (Fundamental Rights and Freedoms) (Amendment) Regulations 2023.
(2) These Regulations come into force immediately before the end of 2023, or on the day after the day on which they are made, whichever is later.
(3) These Regulations extend to England and Wales, Scotland and Northern Ireland.
Amendment of the United Kingdom General Data Protection Regulation
2. —(1) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation)( 3 ) is amended as follows.
(2) In Article 1 (subject-matter and objectives), for paragraph (2) substitute—
“ 2. This Regulation contributes to the protection of individuals’ fundamental rights and freedoms. ” .
(3) In Article 4 (definitions), for point (28) substitute—
“ (28) references to fundamental rights or fundamental freedoms (however expressed) are to the Convention rights within the meaning of the Human Rights Act 1998. ” .
(4) In Article 9(2)(g) (processing of special categories of personal data), omit “, respect the essence of the right to data protection”.
(5) In Article 9(2)(j) (processing of special categories of personal data), omit “, respect the essence of the right to data protection”.
(6) In Article 50(b) (international cooperation for the protection of personal data), omit “other”.
(7) In Article 85(2) (processing and freedom of expression and information), omit “the right to”.
(8) In Article 86(1) (processing and public access to official documents), omit “the right to”.
Amendment of the Data Protection Act 2018
3. —(1)The Data Protection Act 2018( 4 ) is amended as follows.
(2) In section 120(1)(b) (further international role), omit “other”.
(3) In section 205 (general interpretation)( 5 ), for subsection (1A) substitute—
“ (1A) In this Act, references to fundamental rights or fundamental freedoms (however expressed) are to the Convention rights within the meaning of the Human Rights Act 1998. ” .
John Whittingdale
Minister of State
Department for Science, Innovation and Technology
18th December 2023
The term “relevant national authority” is defined in section 21(1) of the Retained EU Law (Revocation and Reform) Act 2023.
EUR 2016/679, amended by S.I. 2019/419 . S.I. 2019/419 was amended by S.I. 2020/1586 .
Section 205(1A) was inserted by regulation 4 of and paragraph 85 of Schedule 2 to S.I. 2019/419 .