Data Protection and Digital Information Bill

Not_A_Hope

Saw this article in the Telegraph. Note the last paragraph. Need to watch that as a result of the new Bill PPCs don’t start dodging their duties under GDPR to have a DPO in the future or find excuses not to provide personal data as a result of a SAR.

The Data Protection and Digital Information Bill, which will go before the House of Commons on Monday, will increase fines for spam calls from £500,000 to £17.5 million, or up to four per cent of the company's turnover.

The bill will also reduce the number of “consent pop-ups” people see online which repeatedly ask users to give permission for websites to collect data about their visits.

The law has been touted by ministers as “one of Brexit’s biggest rewards”.

The bill will also make it easier and quicker for people to verify their identity online as people will now be able to create certified digital identities that make verification easier.

It also creates the possibility of using personal digital data for “research purposes”.

Current data laws are murky on how scientists can process personal data, which they say prevents them from completing vital research.

The definition of scientific research in the new Bill is deliberately vague and could include innovative research into new tech developments.

It is hoped the proposals in the new bill will improve the UK’s ability to strike deals with other countries, theoretically allowing British businesses to gain billions of pounds of data trade.

Data-driven trade generated 85 per cent of the UK’s total service exports and contributed an estimated £259 billion for the economy in 2021.

The law is also set to modernise the structure of the Information Commissioner's Office, including appointing a chair, chief executive and board.

Companies will also no longer need a data protection officer, only a data controller, and will be able to refuse requests from individuals for their own data if the requests are “abusive or excessive”.