While the Bill makes changes to the UK GDPR, which is an area regulated / harmonised at the EU level, the provisions within the scope of this LCM do not impact on the policy of EU alignment in Scotland. 30. Clauses 1-11, 13 and 18-26 concern regulation-making powers that could be used to compel the secure sharing of customer data.