New UK Data Protection rules

The Data Protection and Digital Information Bill was first introduced last Summer and paused in September 2022 so ministers could engage in a co-design process with business leaders and data experts – ensuring that the new regime built on the UK’s high standards for data protection and privacy, and seeks to ensure data adequacy while moving away from the ‘one-size-fits-all’ approach of European Union’s GDPR.

Data-driven trade generated 85% of the UK’s total service exports and contributed an estimated £259 billion for the economy in 2021.

The improved bill will:

• Introduce a simple, clear and business-friendly framework that will not be difficult or costly to implement – taking the best elements of GDPR and providing businesses with more flexibility about how they comply with the new data laws.
• Ensure our new regime maintains data adequacy with the EU, and wider international confidence in the UK’s comprehensive data protection standards.
• Further reduce the amount of paperwork organisations need to complete to demonstrate compliance.
• Support even more international trade without creating extra costs for businesses if they’re already compliant with current data regulation.
• Provide organisations with greater confidence about when they can process personal data without consent.
• Increase public and business confidence in AI technologies by clarifying the circumstances when robust safeguards apply to automated decision-making.

These data reforms are expected to unlock £4.7 billion in savings for the UK economy over the next 10-years and maintain the UK’s internationally renowned data protection standards so businesses can continue to trade freely with global partners, including the EU.