32 (1) Regulations made under section 74A of the 2018 Act (transfers based on adequacy regulations) and in force immediately before the relevant day are to be treated, on and after that day, as if made under section 74AA of that Act (inserted by Schedule 8 to this Act).
(2) In this paragraph, “ the relevant day ” means the day on which paragraph 4 of Schedule 8 to this Act comes into force.
I427 Sch. 9 para. 32 not in force at Royal Assent, see s. 142(1)
I428 Sch. 9 para. 32 in force at 5.2.2026 by S.I. 2026/82 , reg. 2(z11)
Part 3 of the 2018 Act (law enforcement processing): transfers subject to appropriate safeguards U.K.
33 (1) For the purposes of section 73(3) of the 2018 Act (general principles for transfers of personal data), a transfer of personal data to a third country or an international organisation made on or after the relevant day is a transfer made subject to appropriate safeguards where—
(a) an appropriate pre-commencement legal instrument binds the intended recipient of the data, and
(b) if the transfer had been made immediately before the relevant day, the requirement in section 75(1)(a) of the 2018 Act (binding legal instrument containing appropriate safeguards) would have been satisfied by virtue of that instrument.
(2) Sub-paragraph (1) has effect in addition to section 75(1A) of the 2018 Act.
(3) For the purposes of sub-paragraph (1), a legal instrument is an “ appropriate pre-commencement legal instrument ”, in relation to a transfer of personal data, if—
(a) it was entered into before the relevant day,
(b) it is intended to be relied on in connection with the transfer or that type of transfer, and
(c) at least one competent authority is a party to the instrument.
(4) In this paragraph—
“ competent authority ” has the same meaning as in Part 3 of the 2018 Act (see section 30 of that Act);
“ the relevant day ” means the day on which paragraph 6 of Schedule 8 to this Act comes into force;
I429 Sch. 9 para. 33 not in force at Royal Assent, see s. 142(1)
I430 Sch. 9 para. 33 in force at 5.2.2026 by S.I. 2026/82 , reg. 2(z11)
Section 103
Schedule 10 U.K. Complaints: minor and consequential amendments
I431 Sch. 10 para. 1 not in force at Royal Assent, see s. 142(1)
I432 Sch. 10 para. 1 in force at 19.6.2026 by S.I. 2026/82 , reg. 3(b) (with reg. 7 )
2 In Article 12(4) (transparent information, communication and modalities for the exercise of the rights of the data subject), for “lodging a complaint with the Commissioner” substitute “making a complaint to the controller under section 164A of the 2018 Act, making a complaint to the Commissioner under section 165 of that Act” .
I433 Sch. 10 para. 2 not in force at Royal Assent, see s. 142(1)
I434 Sch. 10 para. 2 in force at 19.6.2026 by S.I. 2026/82 , reg. 3(b) (with reg. 7 )
3 (1) Article 13(2) (information to be provided where personal data is collected from the data subject) is amended as follows.