230. Section 12 of the Criminal Justice (Spent Convictions and Certain Disclosures) Act 2016 is amended—

(a) by designating the section as subsection (1),

(b) in that designated subsection (1), by the deletion of “(within the meaning of the Data Protection Act 1988)”, and

(c) by the insertion of the following subsection after subsection (1):

“(2) In this section—

‘Data Protection Regulation’ means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016⁵² on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);

‘personal data’ means personal data within the meaning of—

(a) the Data Protection Act 1988,

(b) the Data Protection Regulation, or

(c) Part 5 of the Data Protection Act 2018.”.