The Secretary of State may by regulations make such provision as the Secretary of State considers necessary or appropriate in connection with an amendment of, or an instrument replacing, the Data Protection Convention which has effect, or is expected to have effect, in the United Kingdom.
The power under subsection (1) includes power—
to amend or replace the definition of "the Data Protection Convention" in section 3;
to amend Chapter 3 of Part 2 of this Act;
to amend Part 4 of this Act;
to make provision about the functions of the Commissioner, courts or tribunals in connection with relevant processing of personal data, including provision amending Parts 5 to 7 of this Act;
to make provision about the functions of the Commissioner in connection with the Data Protection Convention or an instrument replacing that Convention, including provision amending Parts 5 to 7 of this Act;
to consequentially amend this Act.
In subsection (2)(d), "relevant processing of personal data" means—
processing of personal data described in Article 2(1)(a) or (b) or (1A) of the UK GDPR, and
processing of personal data to which Part 4 of this Act applies.
Regulations under this section are subject to the affirmative resolution procedure.
Regulations under this section may not be made after the end of the period of 3 years beginning with the day on which this Act is passed.