UK data protection reform: How the UK GDPR may change

Amendments that the UK Data Protection and Digital Information Bill proposes to make to the UK GDPR

On 18 July 2022, the UK government introduced the Data Protection and Digital Information Bill to Parliament for its first reading. Following the UK leaving the European Union in 2020, the Bill sets out the proposed reforms to the existing UK GDPR, UK Data Protection Act and Privacy and Electronic Communications Regulations.

The current version of the Bill seeks to maintain the majority of key principles that underpin the UK data protection law framework, while at the same time modifying certain key provisions in relation to accountability, lawful grounds for processing, data subject access requests and cookies, amongst others.


We have produced a redline which highlights how the Bill could amend the UK GDPR if passed today, which can be accessed here.

The Bill was scheduled for a second reading before Parliament on 5 September 2022, although this was postponed and it is now expected to be re-scheduled for a later date.


Authored by Dan Whitehead and Kathleen McGrath.

Eduardo Ustaran
Nicola Fulford
Dan Whitehead


This website is operated by Hogan Lovells International LLP, whose registered office is at Atlantic House, Holborn Viaduct, London, EC1A 2FG. For further details of Hogan Lovells International LLP and the international legal practice that comprises Hogan Lovells International LLP, Hogan Lovells US LLP and their affiliated businesses ("Hogan Lovells"), please see our Legal Notices page. © 2024 Hogan Lovells.

Attorney advertising. Prior results do not guarantee a similar outcome.