(1) The Secretary of State may by regulations specify standard data protection clauses which the Secretary of State considers provide appropriate safeguards for the purposes of transfers of personal data to a third country or an international organisation in reliance on Article 46 of the UK GDPR (and see also section 119A).
(2) The Secretary of State must keep under review the standard data protection clauses specified in regulations under this section that are for the time being in force.
(3) Regulations under this section are subject to the negative resolution procedure.