In Article 36 -

(a) in the first paragraph -

(i) for "competent authorities shall carry out their" substitute "the competent authority shall carry out its";

(ii) at the end insert "and the Data Protection Act 2018"[2018 c.12.];

(b) omit the second subparagraph.