The following powers to make provision altering the application of the UK GDPR may be exercised by way of regulations made by the Secretary of State under this section—
the power in Article 6(3) ... to lay down a legal basis containing specific provisions to adapt the application of rules of the UK GDPR where processing is necessary for compliance with a legal obligation, for the performance of a task in the public interest or in the exercise of official authority;
the power in Article 23(1) to make provision restricting the scope of the obligations and rights mentioned in that Article where necessary and proportionate to safeguard certain objectives of general public interest;
the power in Article 85(2) to provide for exemptions or derogations from certain Chapters of the UK GDPR where necessary to reconcile the protection of personal data with the freedom of expression and information.
Regulations under this section may—
amend Schedules 2 to 4—
by adding or varying provisions, and
by omitting provisions added by regulations under this section, ...
consequentially amend section 15 , and
consequentially amend the UK GDPR by adding, varying or omitting a reference to section 15, Schedule 2, 3 or 4, this section or regulations under this section.
Regulations under this section are subject to the affirmative resolution procedure.