Context
Following the Government’s consultation (published September 2021) on reforms to the UK’s data protection regime it has now published it’s response. The proposed Data Reform Bill seeks to introduce significant changes to the data protection regime in the UK.
Key points to note
The response outlines plans including:
- Enabling organisations to create flexible and proportionate compliance regimes by removing the UK GDPR’s prescriptive requirements giving organisations little flexibility about how they manage data risks – including the need for certain organisations to have a Data Protection Officer (DPO) and to undertake impact assessments.
- Proposals for improved data sharing practices to support delivery of public services.
- Commitments to maintaining the robust standards of data protection crucial to protecting the public.
- Increasing fines for nuisance marketing
- Updating PECR rules to cut down on “user consent” pop-ups
- Introducing a new “opt out” cookie model.
- The Data Reform Bill will also require the ICO to be held more accountable to Parliament and the public going forward.
Next actions
We will provide further commentary on the Data Protection Bill when it becomes available. The Government has confirmed that before the implementation of any legislative changes it will work with industry and regulators to ensure that appropriate technology is ready and effective.