In Article 9(3), for "Regulation (EU) 2016/679, Directive 2016/680 and Directive 2002/58/EC" substitute "data protection legislation within the meaning of section 3(9) of the Data Protection Act 2018" [2018 c. 12. Section 3(9) is amended by S.I. 2019/419 with effect from IP completion day.].