On 18 July 2022, the UK government introduced the Data Protection and Digital Information Bill to Parliament for its first reading. Following the UK leaving the European Union in 2020, the Bill sets out the proposed reforms to the existing UK GDPR, UK Data Protection Act and Privacy and Electronic Communications Regulations.
The current version of the Bill seeks to maintain the majority of key principles that underpin the UK data protection law framework, while at the same time modifying certain key provisions in relation to accountability, lawful grounds for processing, data subject access requests and cookies, amongst others.
We have produced a redline which highlights how the Bill could amend the UK GDPR if passed today, which can be accessed here.
The Bill was scheduled for a second reading before Parliament on 5 September 2022, although this was postponed and it is now expected to be re-scheduled for a later date.
Authored by Dan Whitehead and Kathleen McGrath.