GovWire

The proposal aims to update and simplify the UKs data protection framework and the role of the Information Commissioners Office, while focusing on protecting individuals data rights and generating societal, scientific, and economic benefits. The impact assessment (IA) groups the proposed measures into the following reform subheadings:

a) Removing barriers to responsible innovation

b) Reducing burdens on businesses and delivering better outcomes for people

c) Boosting trade and removing barriers to data flows

d) Delivering better public services.

e) Reform of the Information Commissioners Office.

f) Public Safety and National Security.

g) Health and Social Care.

h) Digital Identity.

i) Smart Data.

j) Technical Reforms.

k) Removing requirements on registrars to hold paper records of births and deaths.

The RPC issued a fit for purpose opinion (titled the Data Reform Bill) on the IA relating to the previous Bill introduced in July 2022.

A revised Bill was introduced to Parliament on 8 March 2023. This Bill was introduced following a detailed co-design process with industry, business, privacy and consumer groups. The Bill has amendments in the following areas:

• i i. Extending the exemptions from the regime when conducting scientific research to include research carried out as a commercial activity.
• ii ii. Reducing and simplifying record-keeping requirements for organisations that control or process low risk data.
• iii iii. Clarifying activities that fall under legitimate interests, by listing activities such as direct marketing or ensuring network and information security.
• iv iv. Ensuring that businesses can continue to use their existing transfer mechanisms without a requirement for further checks.
• v v. Clarifying the circumstances in which safeguards apply to significant decisions that are taken about individuals on the basis of profiling.

The published fit for purpose opinion assesses the IA on the revised Bill, entitled the Data Protection and Digital information (No 2) Bill.