(1) Commission Regulation (EU) No 611/2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications is amended as follows.

(2) In Article 2 -

(a) in the heading, for "competent national authority" substitute "Information Commissioner";

(b) in paragraph 1, for "competent national authority" substitute "Information Commissioner";

(c) in paragraph 2, for "competent national authority" (in both places) substitute "Information Commissioner";

(d) in paragraph 3, for "competent national authority" (in each place it occurs) substitute "Information Commissioner";

(e) in paragraph 4 -

(i) for "competent national authority" substitute "Information Commissioner";

(ii) for "Member State concerned" substitute "United Kingdom";

(iii) omit the final sentence;

(f) omit paragraph 5.

(3) In Article 3 -

(a) in paragraph 3, for "competent national authority" substitute "Information Commissioner";