Yes, both.
The section you're referring to is in regard to the transfer of the licence. That is a distinction to be made between any access to the data, which is covered under a certain part of the regulations.
On April 1st, 2008. See this statement in context.