223. Section 8 of the Health (Alteration of Criteria for Eligibility) Act 2013 is amended—

(a) in subsection (4), by the substitution of “Subject to compliance with the Data Protection Regulation and the Act of 2018 and subject to this section” for “Notwithstanding anything contained in the Data Protection Acts 1988 and 2003, but subject to this section”,

(b) in subsection (7), by the substitution of “the Data Protection Commission” for “the Data Protection Commissioner”,

(c) by the deletion of subsection (8),

(d) in subsection (9), by the substitution of “references in this section to personal data shall include references to special categories of personal data (within the meaning of section 2 of the Act of 2018)” for “references in this section to personal data shall include references to sensitive personal data”, and

(e) by the substitution of the following subsection for subsection (10):

“(10) In this section—

‘Act of 2018’ means the Data Protection Act 2018;

‘Data Protection Regulation’ means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016⁴⁶ on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);

‘personal data’ means personal data within the meaning of the Data Protection Regulation.”.