| Link(s): | British Businesses to Save Billions Under New UK Version of GDPR – GOV.UK (www.gov.uk) ICO statement on re-introduction of Data Protection and Digital Information Bill | ICO |
Context
New data laws to cut down paperwork for businesses and reduce cookie pops-up were introduced by the government in Parliament.
Key points to note
The Data Protection and Digital Information Bill was first introduced last Summer and paused in September 2022 so ministers could engage in a co-design process with business leaders and data experts, ensuring that the new regime builds on the UK’s high standards for data protection and privacy and seeks to ensure data adequacy.
The improved bill will:
- Introduce a simple, clear and business-friendly framework that will not be difficult or costly to implement – taking the best elements of GDPR and providing businesses with more flexibility about how they comply with the new data laws
- Ensure the new regime maintains data adequacy with the EU, and wider international confidence in the UK’s comprehensive data protection standards
- Further reduce the amount of paperwork organisations need to complete to demonstrate compliance
- Support more international trade without creating extra costs for businesses if they’re already compliant with current data regulation
- Provide organisations with greater confidence about when they can process personal data without consent
- Increase public and business confidence in AI technologies by clarifying the circumstances when robust safeguards apply to automated decision-making
Some commentators are concerned about the privacy impact of some of the proposals.
Alongside these new changes, the Bill will increase fines for nuisance calls and texts to be either up to four per cent of global turnover or £17.5 million, whichever is greater, and aims to reduce the number of consent pop-ups people see online, which allow websites to collect data about an individual’s visit.
The Bill will also establish a framework for the use of trusted and secure digital verification services, which allow people to prove their identity digitally if they choose to do so. The measures will allow customers to create certified digital identities that make it easier and quicker for people to prove things about themselves. This convenience may come at the cost of having to provide greater amounts of personal (including biometric) data to enable such verification services.
Next actions
None – for information and awareness.