New UK version of GDPR

On March 8, 2023, the UK Secretary of State for Science, Innovation and Technology, Michelle Donelan, introduced the Data Protection and Digital Information (No. 2) Bill to UK Parliament. The original version of the reform bill was proposed by the UK government in July 2022, and then paused during September 2022.

In its press release, UK government said the Bill will “introduce a simple, clear and business-friendly framework that will not be difficult or costly to implement – taking the best elements of GDPR and providing businesses with more flexibility about how they comply with the new data laws”.

Data is fundamental to fuelling economic growth in all areas of society, from unlocking medical breakthroughs to helping people travel, manage their finances, and shop online. It is vital to the development and use of innovative technologies such as artificial intelligence.

Data-driven trade generated 85 per cent of the UK’s total service exports and contributed an estimated £259 billion to the economy in 2021.

The bill will:

• Introduce a simple, clear and business-friendly framework that will not be difficult or costly to implement – taking the best elements of GDPR and providing businesses with more flexibility about how they comply with the new data laws;
• Ensure the new regime maintains data adequacy with the EU, and wider international confidence in the UK’s comprehensive data protection standards;
• Reduce the amount of paperwork organisations need to complete to demonstrate compliance;
• Support international trade without creating extra costs for businesses if they are already compliant with current data regulation;
• Provide organisations with greater confidence about when they can process personal data without consent; and
• Increase public and business confidence in AI technologies by clarifying the circumstances in which robust safeguards apply to automated decision-making.