Applied GDPR: power to make provision in consequence of GDPR regulations
(1) Regulations made under section 23 before IP completion day continue in force until they are revoked, despite the repeal of that section by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019.
(2) The provisions listed in section 186(3) include regulations made under section 23 before IP completion day (and not revoked).
(3) Sub-paragraphs (1) and (2) do not have effect so far as otherwise provided by the law of England and Wales, Scotland or Northern Ireland.
Applied GDPR: national security certificates
(1) This paragraph applies to a certificate issued under section 27 of this Act which has effect immediately before IP completion day.
(2) A reference in the certificate to a provision of the applied GDPR has effect, on and after IP completion day, as it if were a reference to the corresponding provision of the UK GDPR or this Act.