(1) After the report under section 189(1) is laid before Parliament, the Secretary of State may by regulations -
(a) exercise the powers under Article 80(2) of the UK GDPR in relation to England and Wales and Northern Ireland,
(b) make provision enabling a body or other organisation which meets the conditions in Article 80(1) of the UK GDPR to exercise a data subject's rights under Article 82 of the UK GDPR in England and Wales and Northern Ireland without being authorised to do so by the data subject, and
(c) make provision described in section 189(2)(e) in relation to the exercise in England and Wales and Northern Ireland of the rights of a data subject who is a child.
(2) The powers under subsection (1) include power -
(a) to make provision enabling a data subject to prevent a body or other organisation from exercising, or continuing to exercise, the data subject's rights;
(b) to make provision about proceedings before a court or tribunal where a body or organisation exercises a dat
…