Clause 2

by deleting the definitions of “Appeal Committee” and “Appeal Panel” and substituting the following definitions:“ “Appeal Committee” means a Data Protection Appeal Committee constituted under section 48P(4), read with the Seventh Schedule;“Appeal Panel” means the Data Protection Appeal Panel established by section 48P(1);”;

by inserting, immediately after the definition of “data intermediary”, the following definition:“ “derived personal data” —

means personal data about an individual that is derived by an organisation in the course of business from other personal data, about the individual or another individual, in the possession or under the control of the organisation; but(b)does not include personal data derived by the organisation using any prescribed means or method;”;

by deleting the words “Fourth Schedule” in the definition of “prescribed healthcare body” and substituting the words “Second Schedule”;

by deleting the words “section 21(4) and the Fourth Schedule” in the definition of “prescribed law enforcement agency” and substituting the words “sections 21(4) and 26D(6) and the Second Schedule”; and

by deleting the full‑stop at the end of the definition of “tribunal” and substituting a semi‑colon, and by inserting immediately thereafter the following definitions:“ “user activity data”, in relation to an organisation, means personal data about an individual that is created in the course or as a result of the individual’s use of any product or service provided by the organisation;“user‑provided data”, in relation to an organisation, means personal data provided by an individual to the organisation.”.