"data controller, data processor, personal data, processing and appropriate technical and organisational measures" have the meanings set out in the Data Protection Legislation in force at the time. "Data Protection Legislation" means the UK Data Protection Legislation and (for so long as and to the extent that the law of the European Union has legal effect in the UK) the General Data Protection Regulation ((EU) 2016/679) and any other directly applicable European Union regulation relating to privacy.